No. 33
Electronic Transactions
(2) A certification authority shall keep and maintain a register
containing notices of revoked digital signature certificates which
shall be open for inspection by the public.
62.__(1) If a subscriber generates a key pair whose public key is
to be listed in a digital signature certificate issued by a certification
authority and accepted by the subscriber, the subscriber shall
generate the key pair using a trustworthy system.
(2) This section shall not apply to a subscriber who generates a
key pair using a system approved by a certification authority.
63. A subscriber shall not make material representations to a
certification authority for purposes of obtaining a digital signature
certificate, including all information known to the subscriber and
represented in the certificate, unless the representations are accurate
and complete.
64.__(1) A subscriber shall be deemed to have accepted a digital
signature certificate if he publishes in writing or authorizes the
publication of a digital signature certificate__
(a) to one or more persons;
(b) in a register; or
(d) where another digital signature certificate is produced
orproved by written evidence.
(2) By accepting a digital signature certificate issued by a
subscriber or a certification authority, the subscriber listed in the
certificate certifies to all who reasonably rely on the information
contained in the certificate that__
(a) the subscriber rightfully holds the private key
correspon-ding to the public key listed in the digital signature
certificate; and
(b) all representations made by the subscriber to the
certifica-tion authority and material to the information listed in
the digital signature certificate are true.
65.__(1) By accepting a digital signature certificate issued by a
certification authority, the subscriber identified in the certificate
shall assume a duty to exercise reasonable care to retain control of
the private key corresponding to the public key listed in such
digital signature certificate and shall prevent its disclosure to a
person not authorized to create the subscriber's digital signature.
(2) The duty referred to in subsection (1) shall continue during the
operational period of the digital signature certificate and during any
period of suspension of the certificate.
66. A subscriber who has accepted a digital signature certificate
shall, as soon as possible, request the issuing certification authority
39
Generating a
key pairs
Accurate and
complete
representations
Acceptance
of digital
signature
certificate
Control of a
private key
Requesting for
suspension or
revocation