Act 7 Electronic Signatures Act 2011 63. Suspension of certificate by Controller. (1) Unless the certificate provides otherwise or the certificate is a transactional certificate, the Controller may suspend a certificate issued by a certification service provider for a period of forty-eight hours, if— (a) a person identifying himself or herself as the subscriber named in the certificate or as an agent, business associate, employee or member of the immediate family of the subscriber requests suspension; and (b) the requester represents that the certification service provider, which issued the certificate, is unavailable. (2) The Controller may require the person requesting suspension to provide evidence, including a statement under oath or affirmation regarding his or her identity and authorisation and the unavailability of the issuing licensed certification service provider and may decline to suspend the certificate in his or her discretion. (3) The Controller or other law enforcement agency may investigate suspensions by the Controller for possible wrongdoing by persons requesting suspension. 64. Notice of suspension. (1) Upon suspension of a certificate by a certification service provider, the certification service provider shall publish a signed notice of the suspension in the repository specified in the certificate for publication of notice of suspension. (2) Where one or more repositories are specified, the certification service provider shall publish signed notices of the suspension in all those repositories. (3) Where any repository specified no longer exists or refuses to accept publication or if no such repository is recognised under section 69 the certification service provider shall also publish the notice in a recognised repository. 40