Electronic Communications and Transactions [No. 4 of 2021 159 (a) the subscriber rightfully holds the private key corresponding to the public key listed in the certificate; (b) a representation made by the subscriber to the certification authority to the information listed in the certificate is true; and (c) information in the certificate that is within the knowledge of the subscriber is true. 56. (1) A subscriber identified in the certificate who accepts a certificate issued by a certification authority, shall exercise reasonable care in retaining control of the private key corresponding to the public key listed in that certificate and prevent its disclosure to a person not authorised to create that subscriber’s digital signature. Control of private key (2) A subscriber shall continue to perform the duty under subsection (1) during the operational period of the certificate and during any period of suspension of the certificate. 57. A subscriber who has accepted a certificate from a certification authority shall, where the private key corresponding to the public key listed in the certificate has been compromised, request the issuing certification authority as soon as possible to suspend or revoke the certificate. Suspension or revocation of compromised certificate PART VII TIME STAMPING SERVICE PROVIDERS 58. (1) A person who intends to provide a timestamping service shall ensure that the timestamp is linked to data in a manner that precludes the possibility of changing the data undetectably after obtaining the time-stamp. Timestamping service (2) A timestamping service provider shall confirm the timestamps issued by that provider when required. (3) A timestamping service provider shall ensure that it is impossible for that timestamping service provider’s systems to issue identical time stamps for a time earlier or later than the relevant point in time to which the time-stamping service is applied. 59. The following entities may provide a time stamping service: (a) public company; (b) private limited company; or (c) State body. Timestamping service provider