Digital Signature 15 (5) The Commission shall maintain a publicly accessible data base containing a certification authority disclosure record for each licensed certification authority which shall contain all the particulars required under the regulations made under this Act. (6) The Commission shall publish the contents of the data base in at least one recognized repository. Certification authorities to be licensed 4. (1) No person shall carry on or operate, or hold himself out as carrying on or operating, as a certification authority unless that person holds a valid licence issued under this Act. (2) A person who contravenes subsection (1) commits an offence and shall, on conviction, be liable to a fine not exceeding five hundred thousand ringgit or to imprisonment for a term not exceeding ten years or to both, and in the case of a continuing offence shall in addition be liable to a daily fine not exceeding five thousand ringgit for each day the offence continues to be committed. (3) The Minister may, on an application in writing being made in accordance with this Act, exempt— (a) a person operating as a certification authority within an organization where certificates and key pairs are issued to members of the organization for internal use only; and (b) such other person or class of persons as the Minister considers fit, from the requirements of this section. (4) The Minister may delegate his powers under subsection (3) to the Commission and such powers may be exercised by the Commission in the name and on behalf of the Minister. (5) A delegation under subsection (4) shall not preclude the Minister himself from exercising at any time the powers so delegated. (6) The liability limits specified in Chapter 8 of Part IV shall not apply to an exempted certification authority and Part V shall not apply in relation to a digital signature verified by a certificate issued by an exempted certification authority.