Electronic Communications and Transactions [No. 4 of 2021 149 (a) licence certification authorities and time stamping service providers; (b) register cryptography service providers; (c) monitor the conduct, systems and operations of certification authorities, time stamping service providers and cryptography service providers to ensure compliance with this Act; (d) appoint an independent auditing firm to conduct periodic audits of a certification authority to ensure compliance with the provisions of this Act; (e) verify the accuracy of results of the information systems audit submitted to the National Root Certification Authority; (f) conduct inspections and audits; (g) maintain a certificate revocation list and any other repositories; (h) conduct research and development with regard to certification and cryptography services; (i) issue guidelines relating to national public key infrastructure; and (j) regulate the provision of secure signature creation devices. 27. (1) A person shall not provide a certification service or a timestamping service to an institution with critical information infrastructure without a licence issued under this Act. (2) A person who contravenes subsection (1) commits an offence and is liable, on conviction, to a fine not exceeding one million penalty units or to imprisonment for a term not exceeding ten years, or to both. Prohibition of providing certification service or timestamping service without licence (3) A private certification authority shall not provide a certification service under this Act without notifying the Authority in the prescribed manner and form. 28. (1) A person who intends to provide a certification service or a time stamping service to an institution with critical information infrastructure, shall apply to the National Root Certification Authority for a licence in the prescribed manner and form on payment of the prescribed fee. (2) The National Root Certification Authority shall, within sixty days of receipt of an application, under subsection (1), grant or reject the application. Licence