law; or (b) any subscriber-specific information which — (i) is contained in the certificate, or is otherwise provided by the subscriber to the certification service provider, for public disclosure; or (ii) relates to the fact that the certificate has been suspended or revoked. PART VI - CERTIFICATION PRACTICE STATEMENTS 23. Preparation and publication of certification practice statements (1) Every certification service provider shall prepare and publish on their website a certification practice statement in accordance with the Act and these regulations. (2) A certification service provider shall notify the Controller and publish on their website any proposed amendments to certification practice statements, along with a statement of reasons for the proposed amendments, at least thirty days before the effective date of any amendments. (3) The Controller may notify the certification provider to remove from the practice statement any provision which is not consistent with the Act or these Regulations, or which in the opinion of the Controller is unreasonable, including fees and charges. (4) A certification service provider shall maintain on their website each version of the certification practice statement, together with the dates when they became effective. 24. Form of certification practice statement A certification practice statement shall be in a form that (a) ensures that the information conveyed clearly demonstrate the use of trustworthy systems; (b) is clear, complete and concise; (c) conforms to any form requirements specified by the Controller.