[Home] [Databases] [WorldLII] [Search] [Feedback] Malaysia Legislation

(1) The certification authority disclosure record of a licensed certification authority shall contain the following particulars:

(a) a statement that the certification authority disclosure record is provided and maintained by the Controller;

(b) the business name and registered address of the licensed certification authority;

(c) the telephone and facsimile number of the licensed certification authority, if any;

(d) the electronic mail or other address by which the licensed certification authority may be contacted electronically, if any;

(e) the distinguished name of the licensed certification authority;

(f) the licence number, the date and time of the issue, and the date and time of the expiry, of the licence issued to the licensed certification authority;

(g) the restrictions imposed on the licence issued to the licensed certification authority under section 15 of the Act, if any;

(h) if the revocation of a licence under section 9 of the Act has taken effect, the fact of the revocation and its effective date;

(i) if a licence has been surrendered under section 11 of the Act, the fact of the surrender and its effective date;

(j) if the licensed certification authority has no intention of renewing its licence under section 17 of the Act, a statement to that effect;

(k) the current public key or keys of the licensed certification authority by which its digital signatures on published certificates may be verified;

(l) the amount of the licensed certification authority's suitable guarantee;

(m) the total amount of all claims filed with the Controller for payment from the suitable guarantee filed by the licensed certification authority;

(n) a brief description of any limit known to the Controller and applicable to the licensed certification authority's liability or legal capacity to pay damages in tort or for breach of a duty under the Act or these Regulations, unless the limitation is specified in the Act or these Regulations;

(o) a statement indicating the location of the licensed certification authority's certification practice statement, the method or procedure by which it may be retrieved, its form and structure, its authorship and its date;

(p) the date and result of a compliance audit under section 20 of the Act;

(q) if a licensed certification authority is exempted from a compliance audit under section 21 of the Act, a statement to that effect;

(r) the repository used by the licensed certification authority;

(s) if a certificate containing the public key required to verify one or more certificates issued by the licensed certification authority has been revoked or is currently suspended, the date and time of its revocation or suspension;

(t) any event that substantially affects the licensed certification authority's ability to conduct its business or the validity of a certificate published in the repository provided by the Controller or in a recognised repository; and

(u) any other particulars relating to the licensed certification authority the Controller thinks fit.