---------------------------------------------------------------------------

Certification Form for CSPs

Oracle's JCE implements encryption using Cryptographic Service Providers (CSPs).
Only CSPs signed by a trusted entity can be plugged into the JCE framework. You
have indicated that you will be providing a CSP for JCE.

Prior to submitting this form, you must first obtain a JCE Code Signing
Certificate Request Number. Full instructions for this process can be found in
the Java Cryptography Architecture documentation, where this form was located.

When you have obtained the CSR number, please read, complete, sign, and send
this form with the following heading:

    Subject Line: CSR # ____
    Attention: Encryption Export
    Oracle, Inc.
    Global Trade Compliance

You can fax the form:

    Fax # 1-650-607-0920

Or send as a PDF file attachment via email to exporteccn_ww@oracle.com, with
"CSR #___" in the subject line.

-------------------------------------------------------------------------

Certificate Request Number : ______

Overview

Export controls on commercial encryption products are administered by the Bureau
of Industry and Security (BIS) in the U.S. Department of Commerce. Rules
governing exports of encryption are found in the Export Administration
Regulations (EAR), 15 CFR Parts 730-774 which implements the Export
Administration Act ("EAA" 50 U.S.C. App. 2401 et seq.).

BIS requires that each entity exporting products be familiar with and comply
with their affirmative obligations set forth in the Export Administration
Regulations. Please note that the regulations are subject to change. We
recommend that you obtain your own legal advice when attempting to export. In
addition some countries may restrict certain levels of encryption imported into
their country. We recommend consulting legal counsel in the appropriate country
or the applicable governmental agencies in the particular county.

If you developed your CSP inside the United States, and you want to export your
CSP, it must be reviewed and approved for export by the Bureau of Industry and
Security.

If you developed your CSP outside the Unites States, then you may not have to
submit your product for a technical review, but it may be subject to the
requirements of the Export Administration Regulations.

    
Certification

I certify that I have read the above "Overview" and will comply with the Export
Administration Regulations. I understand that any CSP developed in the United
States may not be exported from the United States without prior approval by the
US Government and that such approval is my responsibility. I further understand
any CSP developed outside the United States nevertheless may be subject to the
Export Administration Regulations.

Company Name:  ___________________________________
Address:       ___________________________________
               ___________________________________
               ___________________________________

Signature:     ___________________________________
Date:          ___________________________________
Printed Name:  ___________________________________
Title:         ___________________________________