Terms & Conditions of Use

This document is a legal agreement between you (the User) and the provider and developer of the platform. By accessing and using the platform you confirm that you have read, understood and fully accept these terms. If you do not agree with any of them, do not use the platform.

1. What the platform is

• The Platform: the "Tools" module — a set of technical tools for testing public key infrastructures and cryptographic services: certificate authorities (Root and Sub CA), certificate profiles and issuance, CSRs, enrollment and validation protocols (SCEP, ACME, EST, CES, CMP, OCSP, CDP/CRL), cryptographic utilities (key generation, decoding, ASN.1, hashing, signatures, KDF, conversions, comparison), a DNS server, certificate expiry monitoring, Certbot, TLS/SSL tests and traffic captures.
• Purpose of the platform: testing, validation, troubleshooting and learning — in lab, development and quality assurance (QA) environments.
• User Data: private keys, certificates, CAs, profiles, configurations, DNS zones, captures, logs and any other content created, generated or uploaded by the User.

2. Testing environment — NOT for production

• Sole purpose: the platform is designed and provided exclusively for testing. It is not designed, verified or warranted for production systems, critical services or the protection of real data or operations.
• Not recommended in production: using certificates, keys or certificate authorities created on the platform to secure real systems, services, devices or users is strongly discouraged.
• At your own risk: any use outside the testing purpose — including in production — is solely at the User's risk, and the User bears all of its consequences in full.

3. Data loss — no liability

• No guarantee of retention: User Data — including private keys, certificates and certificate authorities — may be lost, deleted, corrupted or become inaccessible at any time, for any reason (errors, maintenance, updates, incidents, termination of the service), without notice.
• No guaranteed backup: the provider guarantees no backups and has no obligation to recover lost data.
• User's responsibility: the User is solely responsible for keeping their own copies of any data they need.
• Exclusion of liability: the provider and developer of the platform are in no event liable for the loss, disclosure or compromise of keys, certificates, CAs or any other data, nor for their consequences (service outages, invalid or revoked certificates, inaccessible systems, replacement costs).

4. Strictly prohibited uses

Using the platform for any of the following is STRICTLY PROHIBITED:

• hacking, unauthorised access, circumventing security measures or exploiting vulnerabilities of any system;
• reconnaissance, mapping, probing or gathering information about systems, networks or organisations;
• directing any test, connection, query or traffic — including TLS/SSL tests, DNS queries, certificate enrollments or validations — against any person, organisation, entity, system or website without its explicit, prior, written consent;
• intercepting, capturing or analysing other people's traffic without their consent;
• issuing certificates that impersonate other people, organisations or domains, phishing or any form of deception;
• any illegal activity or activity that infringes the rights of third parties.

The User warrants that they hold the owner's explicit, written consent for every system, domain or service they test through the platform. Breaching these prohibitions results in the immediate and permanent suspension of the account, without notice, and may be reported to the competent authorities.

5. Full disclaimer of liability

• "As is": the platform is provided "as is" and "as available", without any warranty, express or implied — including as to operation, availability, security, accuracy of results or fitness for a particular purpose.
• No liability of the developer: to the maximum extent permitted by law, the provider and developer of the platform cannot be held liable for any direct or indirect damage — loss of data, keys or certificates, financial loss, business interruption, fines, penalties or third-party claims — arising from the use of the platform, the inability to use it, or its use for purposes other than those it was built for.
• Indemnification: the User agrees to indemnify and defend the provider and developer of the platform against any claims, damages, costs or penalties arising from a breach of these terms or from unauthorised, illegal or abusive use of the platform by the User or by members of their team.

6. Account and team

• Responsibility for the team: the User is responsible for every member they invite into their organisation, for their actions and for the configuration of access roles.
• Access security: the User keeps their sign-in details confidential; enabling two-step authentication (2FA) is recommended.
• Limits and availability: resources are limited according to the plan; the service may be changed, interrupted or discontinued at any time, with no availability guarantee.

7. Logs, personal data and authorities

• Audit logs: the platform records relevant actions (PKI operations, certificate issuance and revocation, test targets, IP addresses) for security, compliance and abuse prevention.
• Personal data: the User does not enter third parties' personal data without a legal basis and complies with applicable law (including the GDPR).
• Cooperation with authorities: in case of abusive use or a legal investigation, the provider cooperates with the competent bodies and provides them with the available logs.

8. Changes

• Updates: the provider may change these terms at any time. A new version must be explicitly accepted before continuing to use the platform.