28
Laws of Malaysia
ACT 562
Disclosures on inquiry
28. (1) A licensed certification authority shall, on an inquiry being
made to it under this Act, disclose any material certification practice
statement and any fact material to either the reliability of a certificate
which it has issued or its ability to perform its services.
(2) A licensed certification authority may require a signed, written
and reasonably specific inquiry from an identified person, and
payment of the prescribed fee, as conditions precedent to effecting
a disclosure required under subsection (1).
Prerequisites to issuance of certificate to subscriber
29. (1) A licensed certification authority may issue a certificate
to a subscriber only after all of the following conditions are satisfied:
(a) the licensed certification authority has received a request
for issuance signed by the prospective subscriber; and
(b) the licensed certification authority has confirmed that—
(i) the prospective subscriber is the person to be listed
in the certificate to be issued;
(ii) if the prospective subscriber is acting through one
or more agents, the subscriber duly authorized the
agent or agents to have custody of the subscriber’s
private key and to request issuance of a certificate
listing the corresponding public key;
(iii) the information in the certificate to be issued is
accurate;
(iv) the prospective subscriber rightfully holds the private
key corresponding to the public key to be listed in
the certificate;
(v) the prospective subscriber holds a private key capable
of creating a digital signature; and
(vi) the public key to be listed in the certificate can be
used to verify a digital signature affixed by the
private key held by the prospective subscriber.
(2) The requirements of subsection (l) shall not be waived or
disclaimed by the licensed certification authority, the subscriber,
or both.