LAWS OF BRUNEI
Electronic Transactions
2008 Ed.
CAP. 196
25
Disclosure.
28.
(1) A certification authority shall disclose —
(a) its certificate that contains the public key corresponding to
the private key used by that certification authority to digitally sign
another certificate (referred to in this section as a certification
authority certificate);
(b) any relevant certification practice statement;
(c) notice of the revocation or suspension of its certification
authority certificate; and
(d) any other fact that materially and adversely affects either the
reliability of a certificate that the authority has issued or the
authority’s ability to perform its services.
(2) In the event of an occurrence that materially and adversely
affects a certification authority’s trustworthy system or its certification
authority certificate, the certification authority shall —
(a) use reasonable efforts to notify any person who is known to
be or foreseeably will be affected by that occurrence; or
(b) act in accordance with procedures governing such an
occurrence specified in its certification practice statement.
Issuing of certificate.
29.
(1) A certification authority may issue a certificate to a prospective
subscriber only after the certification authority —
(a) has received a request for issuance from the prospective
subscriber; and
(b) has —
(i) if it has a certification practice statement, complied
with all of the practices and procedures set forth in
such certification practice statement including
procedures regarding identification of the perspective
subscriber; or
B.L.R.O. 4/2008