PART II - THE COMMISSION AND THE LICENSING OF CERTIFICATION AUTHORITIES
Section 4. Certification authorities to be licensed.
(1) No person shall carry on or operate, or hold himself out as carrying on or operating, as a certification authority unless that person holds a valid licence issued under this Act.
(2) A person who contravenes subsection (1) commits an offence and shall, on conviction, be liable to a fine not exceeding five hundred thousand ringgit or to imprisonment for a term not exceeding ten years or to both, and in the case of a continuing offence shall in addition be liable to a daily fine not exceeding five thousand ringgit for each day the offence continues to be committed.
(3) The Minister may, on an application in writing being made in accordance with this Act, exempt —
(a) a person operating as a certification authority within an organisation where certificates and key pairs are issued to members of the organisation for internal use only;and
(b) such other person or class of persons as the Minister considers fit, from the requirements of this section.
(4) The Minister may delegate his powers under subsection (3) to the Commission and such powers may be exercised by the Commission in the name and on behalf of the Minister.
(5) A delegation under subsection (4) shall not preclude the Minister himself from exercising at any time the powers so delegated.
(6) The liability limits specified in Chapter 8 of Part IV shall not apply to an exempted certification authority and Part V shall not apply in relation to a digital signature verified by a certificate issued by an exempted certification authority.