certification certificate throughout its validity or that are included in the certificate; 3. employ trustworthy systems, procedures and human resources in performing its services in accordance with the criteria determined by the Supreme Council. Article 36 A certification service provider shall provide the signatory with means that enable the signatory to submit a notice that the signature creation information has been compromised and offer the signatory a timely revocation service. Article 37 A certification service provider shall provide reasonably accessible means that enable a relying party to ascertain from the certification certificate the following: 1. the identity of the certification service provider; 2. that the signatory had control of the signature creation information at the time when the certificate of certification was issued; 3. that signature creation information was valid at or before the time when the certificate of certification was issued. Article 38 A certification service provider shall provide reasonably accessible means that enable a relying party to ascertain the following: 1. the identity of the certification service provider; 2. any limitation on the purpose or value for which the signature creation information or the certificate may be used; 3. the method used to determine the identity of the signatory; 4. that the signature creation information is valid and have not been compromised; 5. any limitation on the scope or extent of liability stipulated by the certification service provider; 6. the method to give notice pursuant to this Law; 7. whether a timely revocation service is offered. Article 39 The certification service provider shall revoke or suspend the certification certificate upon the request of the owner of the certificate or under any other circumstances that require suspension or revocation of the certificate. The Supreme Council shall issue a decision specifying those circumstances along with the criteria. The certification service provider shall also immediately notify the owner of the certification certificate regarding the revocation or suspension of the certificate and the reasons therefor and shall cease the suspension or revocation should the reason no longer exists. The certification service provider shall be responsible for the damages incurred by a person acting in good faith as a result of the failure on the part of the certification service provider to take action to revoke or suspend the certification certificate in the circumstances stated in the first paragraph of this Article. Article 40 A certification service provider shall bear the legal consequences of its failure to comply with the requirements of the preceding Articles of this Chapter, including, but not limited to, the liability for damages caused to any person who reasonably relies on a certification certificate that is affected by the failure to comply. In assessing this liability of the certification service provider, the following factors shall be taken into account: