Electronic Transactions Act · 1999 Revised Edition · Part X · Regulation of Certification Authorities
45. Liability limits for licensed certification authorities
Feedback & supportUnless a licensed certification authority waives the application of this section, a licensed certification authority shall not be liable —
for any loss caused by reliance on a false or forged digital signature of a subscriber, if, with respect to the false or forged digital signature, the licensed certification authority complied with the requirements of this Act; or
digital signature
“digital signature” means an electronic signature consisting of a transformation of an electronic record using an asymmetric cryptosystem and a hash function such that a person having the initial untransformed electronic record and the signer’s public key can accurately determine —(a)whether the transformation was created using the private key that corresponds to the signer’s public key; and(b)whether the initial electronic record has been altered since the transformation was made;
in excess of the amount specified in the certificate as its recommended reliance limit for either —
certificate
“certificate” means a record issued for the purpose of supporting digital signatures which purports to confirm the identity or other significant characteristics of the person who holds a particular key pair;
a loss caused by reliance on a misrepresentation in the certificate of any fact that the licensed certification authority is required to confirm; or
failure to comply with sections 29 and 30 in issuing the certificate.