following factors
(a) financial and human resources, including
existence of assets;
(b) quality of hardware and software systems;
(c)
procedures for processing of certificates
and applications for certificates and
retention of records;
(d) availability of information to signatories
identified in certificates and to potential
relying parties;
(e) regularity and extent of audit by an inde
pendent body; and
(f) the existence of a declaration by the State,
an accreditation body, or the certification
service provider, regarding compliance with
or existence of the factors set out in
paragraphs (a) to (e).
Generating key
pair
196. (1) Subject to subsection (2), where a sub
scriber generates a key pair of which the public key
is to be set out in a certificate and accepted by the
subscriber, the subscriber shall generate the key
pair using a trustworthy system.
(2) Subsection (1) does not apply to a subscriber
who generates a key pair using a system approved
by a certification authority
Acceptance of
certificate
197. (1) A subscriber is deemed to have accepted
a certificate where he or she
(a) publishes or authorizes the publication of
the certificate
(i) to any other person, or
(ii) in a repository, or
(b) otherwise demonstrates approval of the
certificate while knowing or having notice of
189