Electronic Transactions Act · 2008 Revised Edition · Part VIII · Duties of Certification Authorities
28. Disclosure
Official textFrom Attorney General's Chambers, unchanged
A certification authority shall disclose —
certification authority
“certification authority” means a person who or an organisation that issues a certificate;
its certificate that contains the public key corresponding to the private key used by that certification authority to digitally sign another certificate (referred to in this section as a certification authority certificate);
any relevant certification practice statement;
notice of the revocation or suspension of its certification authority certificate; and
any other fact that materially and adversely affects either the reliability of a certificate that the authority has issued or the authority’s ability to perform its services.
In the event of an occurrence that materially and adversely affects a certification authority’s trustworthy system or its certification authority certificate, the certification authority shall —
trustworthy system
“trustworthy system” means computer hardware, software and procedures that — (a) are reasonably secure from intrusion and misuse; (b) provide a reasonable level of availability, reliability and correct operation; (c) are reasonably suited to performing their intended functions; and (d) adhere to generally accepted security procedures;
use reasonable efforts to notify any person who is known to be or foreseeably will be affected by that occurrence; or
act in accordance with procedures governing such an occurrence specified in its certification practice statement.
Terms defined in s 2
certification authority
Defined · s 2“certification authority” means a person who or an organisation that issues a certificate;
certification practice statement
Defined · s 2“certification practice statement” means a statement issued by a certification authority to specify the practices that the certification authority employs in issuing certificates;
private key
Defined · s 2“private key” means the key of a key pair used to create a digital signature;
public key
Defined · s 2“public key” means the key of a key pair used to verify a digital signature;
trustworthy system
Defined · s 2“trustworthy system” means computer hardware, software and procedures that — (a) are reasonably secure from intrusion and misuse; (b) provide a reasonable level of availability, reliability and correct operation; (c) are reasonably suited to performing their intended functions; and (d) adhere to generally accepted security procedures;
Part IX
Duties of Subscribers
Part XI
Government Use of Electronic Records and Signatures
Part XII