(1) If any person who works as a Certifying Authority without a license issued by the Controller under this Act, shall be liable to the punishment with a fine not
exceeding one hundred thousands Rupees or with an imprisonment not exceeding two years or with both, depending on seriousness of the offence.
(2) Any person without obtaining a license from the Certifying Authority publishes a fake license or false statement in regard to license or
provides to any person by any other means, shall be liable to the punishment not exceeding one hundred thousand Rupees in the case where the act referred
to in Sub-section (1) has not been accomplished by such a person.
(3) If any person publishes or otherwise makes available a certificate to any other person by any means knowingly that a certificate is not issued by
the Certifying Authority referred to in such a certificate or the subscriber listed in such certificate has not accepted the certificate or such a certificate is already
suspended or revoked, shall be liable to the punishment with a fine not exceeding one hundred thousands Rupees or with an imprisonment not
exceeding two years or with both.
Provided that, if such a certificate suspended or revoked is published or provided for the purpose of verification of the Digital Signature before it was
suspended or revoked, it shall not be deemed to have been committed an offence under this Sub-section.