(1) The records of all the certificates issued in accordance with this Act shall be kept by the controller.
(2) For the purpose of sub-section (1), the Controller shall do the following to ensure the confidentiality and security of digital signatures:-
(a) Using computer security systems,
(b) implementing security procedures to ensure the confidentiality and integrity of digital signatures,
(c) To comply with the prescribed standards.
(3) The controller shall maintain a computer database of all public keys in a computer system in an up-to-date manner.
(4) The controller shall provide the public key to any person who requests to provide the public key for the purpose of verifying the digital signature.