Article (36)
The authentication service provider shall:
1- Immediately suspend the operation of the certificate upon its owner’s request if it
appears to him or genuinely believe that:
(a)
The certificate was provided upon false or forged
informations.
(b)
The signature originating tools was counterfeited
(c)
The certificate was used for fraudulent purposes.
(d)
The informations included in the certificate were changed.
2- Immediately notify the owner of the certificate on suspension of the certificate and the
reasons therefor.
3- Immediately stop the suspension if the owner of the certificate retracted his request for
suspension or on prove of the validity of informations included in the certificate and
the validity of its usage.
4- The owner of the certificate or any other interested third party shall have the right to
object to the suspension decision issued by the authentication service provider.
Article (37)
The authentication service provider shall revoke the certificate immediately in the following
cases:
(a)
If the owner of the certificate so requests.
(b)
If he knows the death of the owner or the dissolution or liquidation of the
juristic person who possess the certificate.
(c)
If he ensures, after thorough examination, of the accuracy of the reasons on
which he relies on suspending the certificate.
Article (38)
The authentication service provider shall be responsible for the damage ensued as a result of
his failure to take an action to suspend or revoke the certificate in accordance with Article
(36) and (37) of this Law.
Article (39)
The authentication service provider shall undertake the responsibility of depositing all public
keys authorized in accordance with this law and shall keep a database in a computer
containing all public keys in a way to render such a database and the public key available to
the public.
Article (40)
No person is permitted to publicize a certificate referring to an authentication service provider
whose name is appearing on the certificate if that person knows that:
1) The authentication service provider appeared in the certificate has not issued it.
2) The Signatory whose name appeared in the certificate has refused it.
3) The certificate has been suspended or revoked.
However, publication may be allowed for the purpose of ascertaining that the electronic
signature is effected before suspension or revocation.
Article (41)
1- The authentication service provider who desires to stop his activity shall notify the
competent authority (3) three months prior to stoppage.
13