282
CAP. 411A
Kenya Information and Communications
[Rev. 2011
[Subsidiary]
“relying party” means an individual or organization that acts on the
basis of a certificate;
“subdomain administrator” means an entity managing a sub domain in
the .ke ccTLD;
“subscriber” means a certificate holder;
“subscriber identity verification method” means the method used to verify
and authenticate the identity of a subscriber;
“technical contact” means the entity responsible for maintaining the
primary name server for a domain name and for effecting technical changes
to a domain name;
“time-stamp” means a cryptographical digital attestation that a document
or data existed at a particular time and has not been altered since a particular
point in time and serves as a trusted third party witnessing the existence and
particulars of electronic data;
“time-stamp services” means issuance of time-stamps.
License for
electronic
certification services.
Application for a
licence.
3. The Commission may, upon application in the prescribed manner and
subject to such requirements as it may consider necessary, grant a licence to a
person to provide electronic certification services.
4. A person applying for a licence shall, in addition to the requirements
prescribed in the Act and any Regulations made thereunder—
(a) submit for approval a certification practice statement, which fulfils
the requirements prescribed in these Regulations;
(b) undergo and pass an initial audit; and
(c) fulfill other requirements relating to qualification, expertise,
manpower, financial resources and infrastructure facilities necessary
to issue an advanced electronic signature certificate as may be
prescribed by the Commission from time to time.
Recognition of
foreign certification
service. Providers.
5. (1) The Commission may recognize a foreign certification service
provider as a certification service provider for the purposes of these Regulations,
where the foreign certification service provider—
(a) is duly licensed or authorized by the relevant government authority
in the country in which it operates;
(b) complies with internationally acceptable standards and requirements
under the Act and these Regulations; and
(c) has established a local agent to provide the certification services