Electronic Communications and Transactions [No. 4 of 2021 “National Root Certification Authority” means the National Root Certification Authority referred to under section 25; “operational period” in relation to a certificate, means a period beginning on the date and time the certificate is issued by a certification authority, or a later date and time specified in the certificate and ending on the date and time the certificate expires or as stated in the certificate, unless earlier revoked or suspended; “private certification authority” means a certification authority registered by the National Root Certification Authority to provide certification services to institutions whose information infrastructure is not critical; “private key” means the key of a key pair used to create a digital signature; “public key” means the key of a key pair used to verify a digital signature; “public key infrastructure” means a system comprising hardware, software, policies, processes, and procedures required to create, manage, distribute, use, store, and revoke digital certificates and public keys; “recovery agent” means a person or entity who provides recovery information for storage services; “recovery information” means a parameter that may be used with an algorithm, other data or hardware, to decrypt data or communications; “registrar” means a person who is given authority to populate a .zm domain registry; “Registry” means a database of domain names registered under .zm; “registrant” means the person or organisation whose application of a domain name is successful; “registration authority” means a person or entity that is entrusted by the certification authority to register or vouch for the identity of users of a certification authority, but does not sign certificates; “repository” means a system for storing and retrieving certificates or other information relevant to a certificate; “secure signature creation device” means an adapted piece of software or hardware, and includes a microchip card equipped with a security chip, which is used for the storage and application of a private key; “subscriber” means a person who is the subject named or identified in a certificate issued to that person and who holds a private key that corresponds to a public key listed in that certificate; 139