Digital Signature
29
Publication of issued and accepted certificate
30. (1) Where the subscriber accepts the issued certificate, the
licensed certification authority shall publish a signed copy of the
certificate in a recognized repository, as the licensed certification
authority and the subscriber named in the certificate may agree,
unless a contract between the licensed certification authority and
the subscriber provides otherwise.
(2) Where the subscriber does not accept the certificate, a licensed
certification authority shall not publish it, or shall cancel its
publication if the certificate has already been published.
Adoption of more rigorous requirements permitted
31. Nothing in sections 29 and 30 shall preclude a licensed
certification authority from conforming to standards, certification
practice statements, security plans or contractual requirements more
rigorous than, but nevertheless consistent with, this Act.
Suspension or revocation of certificate for faulty issuance
32. (1) Where after issuing a certificate a licensed certification
authority confirms that it was not issued in accordance with sections
29 and 30, the licensed certification authority shall immediately
revoke it.
(2) A licensed certification authority may suspend a certificate
which it has issued for a reasonable period not exceeding
forty-eight hours as may be necessary for an investigation to be
carried out to confirm the grounds for a revocation under
subsection (1).
(3) The licensed certification authority shall immediately notify
the subscriber of a revocation or suspension under this section.
Suspension or revocation of certificate by order
33. (1) The Commission may order the licensed certification
authority to suspend or revoke a certificate issued by it where the
Commission determines that—
(a) the certificate was issued without compliance with sections
29 and 30; and
(b) the non-compliance poses a significant risk to persons
reasonably relying on the certificate.