RAAPR Certification Practice Statement

OID:1.3.6.1.4.1.32877.1.1.1


This RAAPR Certification Practice Statement (CPS) presents the way RAAPR has practised and practices the issuance and life cycle management of Certificates. The URL, which tells where to find this CPS, is added to all Certificates issued by RAAPR. If it is missing for some reason, it will be fairly difficult for you to find this CPS, won't it?

RAAPR stores the Root Key in an access controlled Hardware Security Module (HSM), which was bought from eBay for a very reasonable price. The Root Private Key is kept secret, even from the staff of RAAPR. This is because the little bugger just whispered "FIPS" and slipped deep deep inside the HSM module and now it won't come out whatever we do. RAAPR knows that the HSM hardware is 3rd class security device according to a 140-2 standard. RAAPR also likes curves, and indeed some curves are so amazing, that we do not want to bind them to any man made constraints.

RAAPR Certificates are issued to any purpose RAAPR sees fit. The Operational Period of a Certificate is defined within the Certificate. If a Certificate is revoked prior to the expiration, it can be added to the Certificate Revocation List (CRL). It might happen, however, that RAAPR forgets to add a few certificates to the CRL.

RAAPR tries to issue Certificates in accordance with this CPS and may perform limited authentication of the Subscribers. RAAPR may revoke any issued Certificates at any time RAAPR sees fit, without any consultation and absolutely without any compensation. The Subscriber is solely responsible for the protection of its Private Key and shall immediately request revocation of a Certificate if the related Private Key is compromised. RAAPR does not accept any responsibility for any use or misuse of the issued Certificates. Certificates that are on the CRL shall not be trusted. If a Certificate is removed from a CRL, you may only trust it again if you are stupid enough to do so. It's your own decision, see if we care. If I were you, I would think twice before trusting any Certificate issued by RAAPR. If the CRL cannot be checked, all Certificates issued under this CPS shall be considered as suspended or revoked until their validity can be checked from a valid CRL.

RAAPR does not give any warranty or take liability of any kind. The Certificates issued under this CPS, are without any value. RAAPR hereby disclaims all liability to all subscribers and relying parties (including the liberal party) who either follow or do not follow the procedures mentioned in this CPS. Considering all this, it might be a wise idea not to trust these Certificates.

All Certificates issued by RAAPR are Unqualified Certificates. They do not follow the Directive 1999/93/EC on electronic signatures, or any other directive, CEN, ETSI or IETF specifications relating to electronic signatures or Personal Data Act (although RAAPR likes "acts" of different nature). In fact RAAPR misses a directive altogether and therefore the certification does not hold water, and neither does the RAAPR staff.

Accumulative limitation on Liability including but not limited to RAAPR's willful misconduct has been updated because of the high inflation rate in Zimbabwe. It is now limited to cash payment of TWO EUROCENTS (0.02€). This sum payable only in Finland, in the location and at the time selected by RAAPR. This sum includes all costs, including but not limited to the lawyer's fees. If your lawyer costs more, you are forbidden to trust, store or use in any way the Certificates issued by RAAPR. The maximum payable sum is rounded to ZERO EUROCENT (0.00€) as one cent and two cent coins are not in use or circulation in Finland. Because jurisdictions in some countries do not allow the exclusion or limitation on damages, any person living, injured, dead or otherwise operating in such country may not apply, download, place any trust or use the Certificates issued under this CPS. In fact it might be better if they did not use a computer at all.

In no event shall RAAPR be liable for any damages to Applicants, Subscribers, Relying Parties or any other parties (including but not limited to the communist party) arising out of or related to the use or misuse of, or reliance on any Certificate that is issued under this CPS. In no event shall RAAPR be liable to the Applicant, Subscriber, a fatherless baby, Lawyers, Relying Party or other party for damages arising out of any claim that a Certificate infringes any patent, trademark, copyright, trade secret or other intellectual property right of any party, including but not limited to your birthday party.

RAAPR shall not be liable for fire, flood, earthquake, elements of nature or acts of (insert the name of your favourite god here), acts of war, terrorism, riots, civil disorders, rebellions or revolutions in the United States of America, Iran, Tajikistan, Bulvania, Sweden or China (just to pick some countries in random), common cold, strikes, lockouts, or labor difficulties or any other similar cause beyond the control of RAAPR, even if RAAPR was the cause of the incident.

For the other issues we stipulate the following: No stipulation.

This document is under a continuous change control. It may even change during the time you read it.

Any dispute, controversy or claim arising under, in connection with or relating to this CPS or any Certificate issued by RAAPR shall be settled by a friendly game of chess and not in the court of the law.

All puns are intended, but the HTML parser removes the intends.

© 2006 - 2023 RAAPR

5093 visits to this page

RAAPR PKI Repository


The fees of our legal councel are hopefully covered by the income from the following advertisements. So far we have received nothing and things are not likely to get any better.