Rev. 2011]
Kenya Information and Communications
CAP. 411A
283
[Subsidiary]
in Kenya.
(2) A certificate issued by a certification service provider recognized under
paragraph (1) shall be valid for the purposes of the Act and these Regulations.
(3) Where the Commission is satisfied that a foreign certification service
provider has contravened any of the conditions and restrictions of recognition
under paragraph (1), it may revoke the recognition.
6. (1) A certification service provider shall, before commencement of its
operations, prepare a certification practice statement, in accordance with these Certification practice
Regulations and guidelines issued by the Commission from time to time and statement.
submit it, for approval by the Commission.
(2) A certification service provider shall not change the certification
practice statement without the prior written approval of the Commission.
(3) A certification service provider shall specify, in its certification
practice statement(a) any limitation of its liabilities and particularly, the implication of
reliance limitations specified; and
(b) the subscriber identity verification method for the issuance,
suspension, revocation and renewal of a certificate.
(4) A certification service provider shall file, with the Commission, a
copy of its certification practice statement and specify its effective date and
publish it on its website.
(5) A certification service provider shall log all changes to the certification
practice statement and specify the effective date of each change.
(6) A certification service provider shall keep, in a secure manner, a copy
of each version of its certification practice statement and record the date it came
into effect and the date it ceased to have effect.
7. (1) A certification service provider shall—
(a) issue and renew certificates;
(b) suspend, reinstate or revoke certificates;
(c) conduct personal identification of subscribers;
(d) publish accurate information relating to certificates;
(e) provide a repository service listing all published certificates, records
of revoked certificates that may be used to verify the validity of
published certificates;
Responsibilities of a
certification service
provider.