(h) Specifying the terms and conditions subject to which auditors may be appointed and the remuneration to be paid to them; (i) Facilitating the establishment of any electronic system by a Certifying Authority either solely or jointly with other Certifying Authorities and the regulation of such system; (j) Specifying the manner in which the Certifying Authorities shall conduct their dealings with the subscribers; (k) Resolving any conflict of interests between the Certifying Authorities and the subscribers; (l) Laying down the duties of the Certifying Authorities; (m) Maintaining a data-base containing a disclosure record in respect of every Certifying Authority containing such particulars as may be specified by regulations, which record shall be accessible to public. 18.(1) The Controller shall be the repository of all Digital Signature Certificates issued under this Act. (2) The Controller shall — (a) Make use of hardware and procedures that are secure from intrusion and misuse; (b) Observe such other standards as may be prescribed to ensure that the secrecy and security of digital signatures are assured. (3) The Controller shall maintain a computerised database of all public keys in such a manner that the database and the public keys are available to any member of the public. Access to computers and data 19. The Controller may, in writing, authorise the Deputy Controller, Assistant Controller or any other officer to exercise any of the powers of the Controller under this Part. 20. The Controller or any officer authorised by him in that behalf may investigate any contravention of the provisions of this Act or regulations made thereunder. Access to computers and data 21.(1) The Controller or any person authorised by him shall. if he has reasonable cause to suspect that any contravention of the provisions of this Act or regulations made thereunder has been committed, have access to any computer system, any apparatus, data or any other material connected with such system, for the purpose of searching or causing a search to be made for obtaining any information or data contained in or available to such computer system. (2) For the purposes of subsection (1), the Controller or any person authorised by him, may by order, direct any person in charge of, or otherwise concerned with the operation of the computer system, data, apparatus or material, to provide the Controller or the person authorised with such reasonable technical and other assistance as he may consider necessary. 8