Act 7
Electronic Signatures Act
2011
63. Suspension of certificate by Controller.
(1) Unless the certificate provides otherwise or the certificate is a
transactional certificate, the Controller may suspend a certificate issued
by a certification service provider for a period of forty-eight hours, if—
(a) a person identifying himself or herself as the subscriber
named in the certificate or as an agent, business associate,
employee or member of the immediate family of the
subscriber requests suspension; and
(b) the requester represents that the certification service
provider, which issued the certificate, is unavailable.
(2) The Controller may require the person requesting suspension
to provide evidence, including a statement under oath or affirmation
regarding his or her identity and authorisation and the unavailability
of the issuing licensed certification service provider and may decline
to suspend the certificate in his or her discretion.
(3) The Controller or other law enforcement agency may
investigate suspensions by the Controller for possible wrongdoing by
persons requesting suspension.
64. Notice of suspension.
(1) Upon suspension of a certificate by a certification service
provider, the certification service provider shall publish a signed
notice of the suspension in the repository specified in the certificate
for publication of notice of suspension.
(2) Where one or more repositories are specified, the
certification service provider shall publish signed notices of the
suspension in all those repositories.
(3) Where any repository specified no longer exists or refuses to
accept publication or if no such repository is recognised under section
69 the certification service provider shall also publish the notice in a
recognised repository.
40