28. Disclosure
Feedback & supportA certification authority shall disclose —
its certificate that contains the public key corresponding to the private key used by that certification authority to digitally sign another certificate (referred to in this section as a certification authority certificate);
any relevant certification practice statement;
notice of the revocation or suspension of its certification authority certificate; and
any other fact that materially and adversely affects either the reliability of a certificate that the authority has issued or the authority’s ability to perform its services.
In the event of an occurrence that materially and adversely affects a certification authority’s trustworthy system or its certification authority certificate, the certification authority shall —
trustworthy system
“trustworthy system” means computer hardware, software and procedures that —(a)are reasonably secure from intrusion and misuse;(b)provide a reasonable level of availability, reliability and correct operation;(c)are reasonably suited to performing their intended functions; and(d)adhere to generally accepted security procedures;
use reasonable efforts to notify any person who is known to be or foreseeably will be affected by that occurrence; or
act in accordance with procedures governing such an occurrence specified in its certification practice statement.