No. 33
Electronic Transactions
(b) the prospective subscriber has a certification practice
statement in compliance with the content of such statement
including procedures regarding identification of the prospective
subscriber.
(2) In the absence of a certification practice statement, the
certification authority shall confirm by itself or through an
authorized agent that__
(a) the prospective subscriber is the person to be listed in the
digital signature certificate to be issued;
(b) if the prospective subscriber is acting through one or more
agents, the subscriber authorized the agent to have custody of the
subscriber's private key and to request issuance of a digital
signature certificate listing the corresponding public key;
(c) the information in the digital signature certificate to be
issued is accurate;
(d) the prospective subscriber rightfully holds the private key
corresponding to the public key to be listed in the digital
signature certificate;
(e) the prospective subscriber holds a private key capable of
creating a digital signature; and
(f) the public key indicated in the digital signature certificate is
capable of verifying a digital signature affixed by the public key.
56.__(1) By issuing a digital signature certificate, a certification
authority represents any person who relies on the digital signature
certificate or a digital signature verifiable by the public key
indicated in the certificate in accordance with any applicable
certification practice statement.
(2) In the absence of such certification practice statement, the
representing certification authority confirms that__
(a) the certification authority has complied with all applicable
requirements of this Act in issuing the digital signature
certificate, but where the certification authority has published or
submitted it to such relying person, it shall confirm that the
subscriber listed in the digital signature has accepted it;
(b) the subscriber identified in the certificate holds the private
key corresponding to the public key listed in the digital signature
certificate;
(c) the subscriber's public key and private key constitute a
functioning key pair;
(d) all information in the digital signature certificate is
accurate, unless the certification authority has stated in the
digital signature certificate or incorporated by reference in the
37
Representations upon
issuance of a
digital
ignature
certificate