Digital Signature
33
(2) Where the licensed certification authority issued the certificate
at the request of one or more agents of the subscriber, the agent
or agents personally undertake to indemnify the licensed certification
authority under this section, as if they were accepting subscribers
in their own right.
(3) The indemnity provided in this section shall not be disclaimed
or contractually limited in scope.
Certification of accuracy of information given
42. In obtaining information of the subscriber material to the
issuance of a certificate, the licensed certification authority may
require the subscriber to certify the accuracy of relevant information
under oath or affirmation.
CHAPTER 4
Control of private key
Duty of subscriber to keep private key secure
43. By accepting a certificate issued by a licensed certification
authority, the subscriber named in the certificate assumes a duty
to exercise reasonable care to retain control of the private key and
prevent its disclosure to any person not authorized to create the
subscriber’s digital signature.
Property in private key
44. A private key is the personal property of the subscriber who
rightfully holds it.
Licensed certification authority to be fiduciary if holding
subscriber’s private key
45. Where a licensed certification authority holds the private key
corresponding to a public key listed in a certificate which it has
issued, the licensed certification authority shall hold the private
key as a fiduciary of the subscriber named in the certificate, and
may use that private key only with the subscriber’s prior written