36
Trustworthy
system
Electronic Transactions
No. 33
53.__(1) A certification authority shall utilize a trustworthy
system in performing its services.
(2) the registration for the provision of cryptalgraphic services or
products shall be made__
(a) to the Authority;
(b) in the prescribed manner and form; and
(c) upon payment of prescribed fees.
(3) the minister in consultation with the Authority shall issue
regulations__
(a) in respect of use, importation and exportation of inscription
programmes and products; and
(b) prohibiting the exportation of inscription programmes or
other inscription products from Malawi generally, or subject to
such restrictions, as may be prescribed.
Disclosure
Issuance of a
digital
signature
certificate
(4) For the avoidance of doubt, subject to any regulations made
under subregulation (1), it is lawful for any person to use encryption
programme or product provided that it has lawfully come into
possession of that person.
54.__(1) A certification authority shall disclose__
(a) its digital signature certificate that contains the public key
corresponding to the private key used by that certification
authority to digitally sign another digital signature certificate;
(b) any relevant certification practice statement;
(c) notice of the revocation or suspension of its certification
authority certificate; and
(d) any other fact that materially and adversely affects either
the reliability of a digital signature certificate that the authority
has issued or the authority's ability to perform its services.
(2) In case of an occurrence that materially and adversely affects
a certification authority trustworthy system or its certification, the
certification authority shall__
(a) use reasonable efforts to notify any person who is known to
be foreseeably affected by that occurrence; and
(b) act in accordance with procedures governing such an
occurrence specified in its certification practice statement.
55.__(1) A certification authority may issue a certificate to a
prospective subscriber only after__
(a) it has received a request from the prospective subscriber;
and