Electronic Transactions Act · 2008 Revised Edition · Part VII · General Duties Relating to Digital Signatures
24. Prerequisites to publication of certificate
Official textFrom Attorney General's Chambers, unchanged
No person shall publish a certificate or otherwise make it available to a person known by that first-mentioned person to be in a position to rely on the certificate or on a digital signature that is verifiable with reference to a public key listed in the certificate, if that first-mentioned person knows that —
digital signature
“digital signature” means an electronic signature consisting of a transformation of an electronic record using an asymmetric cryptosystem and a hash function such that a person having the initial untransformed electronic record and the signer’s public key can accurately determine — (a) whether the transformation was created using the private key that corresponds to the signer’s public key; and (b) whether the initial electronic record has been altered since the transformation was made;
the certification authority listed in the certificate has not issued it;
certification authority
“certification authority” means a person who or an organisation that issues a certificate;
the subscriber listed in the certificate has not accepted it; or
subscriber
“subscriber” means a person who is the subject named or identified in a certificate issued to him and who holds a private key that corresponds to a public key listed in that certificate;
the certificate has been revoked or suspended, unless such publication is for the purpose of verifying a digital signature created prior to such suspension or revocation.
Terms defined in s 2
certification authority
Defined · s 2“certification authority” means a person who or an organisation that issues a certificate;
digital signature
Defined · s 2“digital signature” means an electronic signature consisting of a transformation of an electronic record using an asymmetric cryptosystem and a hash function such that a person having the initial untransformed electronic record and the signer’s public key can accurately determine — (a) whether the transformation was created using the private key that corresponds to the signer’s public key; and (b) whether the initial electronic record has been altered since the transformation was made;
public key
Defined · s 2“public key” means the key of a key pair used to verify a digital signature;
subscriber
Defined · s 2“subscriber” means a person who is the subject named or identified in a certificate issued to him and who holds a private key that corresponds to a public key listed in that certificate;
Part VIII
Duties of Certification Authorities
Part IX
Duties of Subscribers
Part XI
Government Use of Electronic Records and Signatures
Part XII