Singapore legislation
Regulation 19
of Electronic Transactions (Certification Authority) Regulations 2010
Regulation 19
Revocation of certificates
Subregulation 1
In order to confirm the identity of the subscriber or authorised agent making a request for revocation under paragraph 17(a) of the Third Schedule to the Act, the accredited certification authority must use the subscriber identity verification method specified in the certification practice statement for this purpose.
Subregulation 2
An accredited certification authority must, after receiving a request for revocation, verify the request, revoke the certificate and publish notification of it under paragraph 20 of the Third Schedule to the Act.
Subregulation 3
An accredited certification authority must maintain facilities to receive and act upon requests for revocation at all times of the day and on all days of every year.
Subregulation 4
An accredited certification authority must give notice to the subscriber immediately upon the revocation of a certificate.
Subregulation 5
The date and time of all transactions in relation to the revocation of certificates must be logged and kept in a trustworthy manner.