(5)
A Certifying Authority whose licence has been suspended temporarily shall not issue
any Digital Signature Certificate during the period of such suspension.
27. Notice of revocation or suspension of licence.—(1) Where the licence of a Certifying
Authority is revoked or suspended temporarily, the Controller shall publish notice of such revocation or
suspension, as the case may be, in the database maintained by him.
(2)
Where one or more repositories are specified, the Controller shall publish notices of
such temporarily revocation or suspension, as the case may be, in all such repositories:
Provided that the database containing the temporarily notice of such revocation or suspension,
as the case may be, shall be made available electronically including website or any other medium
which shall be accessible round the clock.
28. Power to delegate.—The Controller may, in writing, authorize the Deputy Controller,
Assistant Controller or any other officer to exercise any of the power of the Controller under this Act.
29. Power to investigate contraventions.—(1) The Controller or any officer authorized by him
in this behalf shall take up for investigation any contravention of the provisions of this Act, rules or
regulations made thereunder.
(2)
The Controller or any officer authorized by him in this behalf shall, for the purposes
of sub-section (1) of this section, have the same power as are vested in a Civil Court under the Code of
Civil Procedure, when trying a suit in respect of the following matters, namely:-(a)
discovery and inspection;
(b)
enforcing the attendance of any person and examining him on oath or
affirmation;
(c)
compelling the production of any document; and
(d)
issuing commissions for the examination of witness.
30. Access to computers and data.—(1) Without prejudice to the provisions of section 45 of
this Act the Controller or any officer authorized by him shall, if he has reasonable cause to suspect that
any contravention of the provisions of this Act or rules and regulations made thereunder has been
committed, have access to any computer system, any apparatus, data or any other material connected
with such system, for the purpose of searching or causing a search to be made for obtaining any
information or data contained in or available to such computer system.
(2)
For the purpose of sub-section (1) of this section the Controller or any officer
authorized by him may, by order, direct any person in charge of, or otherwise concerned with the
operation of, the computer system, data apparatus or material, to provide him with such reasonable
technical and other assistance as he may consider necessary.
(3)
If authorization has been given to a person, the authorized person shall oblige to
assist as instructed under sub-section (1) of this section.
31. Certifying Authority to follow certain procedures.—Every Certifying Authority shall—
(a) make use of hardware, software and procedures that are secure from intrusion and
misuse;
(b) provide a reasonable level of reliability in its services which are reasonable suited to
the performance of intended function under this Act;
(c) adhere to security procedures to ensure that the secrecy and privacy of digital
signatures are assured; and
(d) observe such other standards as may be specified by regulations.
32. Certifying Authority to ensure compliance of the Act, rules, regulations, etc.—Every
Certifying Authority shall ensure that every person employed or otherwise engaged by it complies, in
the course of his employment or engagement, with the provisions of this Act, rules, regulations or
orders made thereunder.
33. Display of licence.—Every Certifying Authority shall display its licence at a conspicuous
place of the premises in which it carries on its business.
10