Terms of Service

Who provides the service

RymarisCerts is a Soligent, Inc. service for managing website certificates. Contact support@rymariscerts.com about these terms, account questions or support. These terms govern your RymarisCerts account and use of this portal. Your certificate authority and hosting provider may have separate terms.

Management, certificates and installation

The management service provides a certificate workspace, saved public certificate history, supported renewal guidance, protected package downloads and installation instructions. Certificate authorities issue certificates after domain-control validation. A Let's Encrypt certificate is available from that authority without a certificate purchase fee; any RymarisCerts fee is for the management service or separately accepted assistance.

On the tested IIS, Apache and Nginx configurations, a native client can renew and install replacement certificates after an authorized administrator completes the one-time setup. You remain responsible for your server, DNS access, task or timer configuration, checking errors and verifying the certificate actually served. Other hosts and unusual configurations require a compatibility check. We do not promise compatibility with every server or uninterrupted service.

A management subscription period is separate from a certificate's validity period. Certificates must be renewed before their own expiry, even during an active annual management plan. Shorter validity limits the time a compromised key or incorrectly issued certificate can be misused.

Early access and prices

Live payments are not enabled during early access. Creating an account or accepting these terms does not authorize a charge. Proposed annual management prices are Starter $10 for one domain, Standard $20 for three domains, Business $49 for ten domains and Agency $99 for twenty-five domains, in US dollars. Wildcard coverage has the same management price as regular coverage within the selected package's domain allowance.

If paid subscriptions become available, each purchased package will have its own subscription period, end date and renewal information. Active paid package allowances add together while each package remains active. Review the exact price, renewal, cancellation, tax and refund terms shown before agreeing to a paid checkout. No live checkout is available under this early-access release. Additional commercial terms must be presented before live billing is activated.

Support and separately quoted services

Written guidance, installation videos and ordinary support do not authorize us to access or administer your systems. Hands-on installation, troubleshooting or other administration requires a separate scope and quote that you choose whether to accept. Requesting a quote does not authorize payment. No guaranteed response time or service-level agreement is offered in this early-access release.

Never place passwords, authentication codes, recovery codes, private keys or package passwords in a support ticket, public URL or ordinary email. Follow a separately agreed secure access process if hands-on assistance is needed.

Your authority and acceptable use

Use the service only for domains and systems that you own or are authorized to administer. If you use it for an organization or client, you must have authority to act for that organization or client and to supply the information you provide.

Do not request certificates for systems without permission, misrepresent domain control, use the service for fraud or phishing, upload another person's secrets, attack the service or other systems, or try to bypass account security, certificate-authority limits or access restrictions. Certificate issuance can fail or be delayed by validation, DNS, provider policies or rate limits.

Account and key security

Every account requires two-factor authentication. Keep your password, authenticator and recovery codes secure and keep your account email address current. Five failed password or authenticator attempts lock the account and source IP address for twenty-four hours.

Portal-created private keys are encrypted at rest. Exporting a private-key package requires fresh authenticator verification or an unused recovery code and your own package password. Secure the downloaded files and keep their password separately. Reformatting or downloading the same certificate again does not revoke an exposed key. Contact support promptly if a key or account may be compromised.

Native renewal clients keep their private keys on your server. RymarisCerts cannot export or remove keys held only by those clients. You are responsible for protecting and backing up your own server and downloaded files.

Saved records and private-key retention

Public certificate records and account history remain available while your account exists. Portal-managed encrypted private keys are retained while their certificates are valid and become eligible for removal thirty days after certificate expiry.

Before removal, a transactional security notice is submitted to the account's confirmed email address with at least seven days to perform a final protected download. Failed, missing or delayed notices postpone removal. Keep your email address current and check your dashboard. Once a key has been removed, obtain a new certificate rather than trying to reformat the removed key.

Removing a stored private key does not revoke a certificate, delete its public history or change your server. Removal from the active database is not immediate erasure of older encrypted recovery backups. Backup copies age out under their separate retention policies. The Privacy Notice explains the stored information and account/data request process.

Availability, changes and ending use

Early-access features can change and may be temporarily unavailable. Maintain your own server and recovery arrangements and monitor certificate expiry and renewal failures. The service does not provide a guarantee that a certificate will always be issued, renewed or installed successfully.

We may restrict access where needed to investigate security incidents, unauthorized use or abuse. You may stop using the service and contact us about account closure and retained information. Account closure, subscription cancellation, certificate revocation and deletion of a key are different actions; request the action you need.

When we require acceptance of a new version of these terms, the account holder must explicitly review and accept it. We keep the accepted document versions, their fingerprints, acceptance time and whether acceptance occurred at registration or during an account review. Existing use is not recorded as acceptance of a new version.

Your rights

These terms do not take away rights that cannot lawfully be limited. Questions, complaints and requests about the service can be sent to support@rymariscerts.com.