(1) Where any Certificate issued by the Certifying Authority and accepted by subscriber, consisting of a public key which corresponds to the key pair and to be listed in such Certificate and if such key pair is supposed to be generated by the subscriber only, then the subscriber shall generate such key pair by applying the secured asymmetric crypto system.
(2) Notwithstanding anything contained in Sub-section (1), if a Certifying Authority and the subscriber have concluded an agreement or the
Certifying Authority has accepted any specific system regarding the security system to be used to generate the key pair, then, it shall be the duty of
subscriber to apply the security system as specified in agreement or accepted by the Certifying Authority.