Page:Electronic Transactions Act 2010.pdf/38

This page has been proofread, but needs to be validated.
ELECTRONIC TRANSACTIONS
39


(e) a subscriber has been dissolved, wound up or otherwise ceased to exist.

(2) Upon effecting such a revocation, other than under sub-paragraph (1)(d) or (e), the certification authority shall immediately notify the subscriber listed in the revoked certificate.

Notice of suspension

19.—(1) Immediately upon suspension of a certificate by a certification authority, the certification authority shall publish a signed notice of the suspension in the repository specified in the certificate for publication of notice of suspension.

(2) Where one or more repositories are specified, the certification authority shall publish signed notices of the suspension in all such repositories.

Notice of revocation

20.—(1) Immediately upon revocation of a certificate by a certification authority, the certification authority shall publish a signed notice of the revocation in the repository specified in the certificate for publication of notice of revocation.

(2) Where one or more repositories are specified, the certification authority shall publish signed notices of the revocation in all such repositories.

PART III
DUTIES OF SUBSCRIBERS

Generating key pair

21.—(1) If the subscriber generates the key pair whose public key is to be listed in a certificate issued by a certification authority and accepted by the subscriber, the subscriber shall generate that key pair using a trustworthy system.

(2) This paragraph shall not apply to a subscriber who generates the key pair using a system approved by the certification authority.

Obtaining certificate

22. All material representations made by the subscriber to a certification authority for purposes of obtaining a certificate, including all information known to the subscriber and represented in the certificate, shall be accurate and complete to the best of the subscriber’s knowledge and belief, regardless of whether such representations are confirmed by the certification authority.

Acceptance of certificate

23.—(1) A subscriber shall be deemed to have accepted a certificate if he—

(a) publishes or authorises the publication of the certificate—
(i) to one or more persons; or