Electronic Transactions Act · 2008 Revised Edition · Part VIII · Duties of Certification Authorities
33. Revocation without subscriber’s consent
Official textFrom Attorney General's Chambers, unchanged
A certification authority shall revoke a certificate, regardless of whether the subscriber listed in the certificate consents, if the certification authority confirms that —
certification authority
“certification authority” means a person who or an organisation that issues a certificate;
a material fact represented in the certificate is false;
a requirement for issuance of the certificate was not satisfied;
the certification authority’s private key or trustworthy system was compromised in a manner materially affecting the certificate’s reliability;
an individual subscriber is dead; or
a subscriber has been dissolved, wound-up or otherwise ceased to exist.
Upon effecting such a revocation, other than under subsections
or (e), the certification authority shall immediately notify the subscriber named in the revoked certificate.
Terms defined in s 2
certification authority
Defined · s 2“certification authority” means a person who or an organisation that issues a certificate;
private key
Defined · s 2“private key” means the key of a key pair used to create a digital signature;
revoke a certificate
Defined · s 2“revoke a certificate” means to permanently end the operational period of a certificate from a specified time;
subscriber
Defined · s 2“subscriber” means a person who is the subject named or identified in a certificate issued to him and who holds a private key that corresponds to a public key listed in that certificate;
trustworthy system
Defined · s 2“trustworthy system” means computer hardware, software and procedures that — (a) are reasonably secure from intrusion and misuse; (b) provide a reasonable level of availability, reliability and correct operation; (c) are reasonably suited to performing their intended functions; and (d) adhere to generally accepted security procedures;
Part IX
Duties of Subscribers
Part XI
Government Use of Electronic Records and Signatures
Part XII