Licences under the
Digital Signature Act 1997
Recognition of Foreign
Certification Authorities
The Commission may recognise by
order of published in the Gazette, certification authorities licensed or otherwise
authorized by governmental entities outside Malaysia. A certificate issued by recognised
foreign certification authorities has the same effect as a certificate issued by
a licensed certification authority of Malaysia.
Criteria for
Recognition of Foreign Certification Authorities
| a) | A foreign certification authority is eligible for recognition if an international treaty, agreement or convention concerning the recognition of its certificates has been concluded to which Malaysia is a party; | |
| b) | It must be licensed or otherwise authorized by the relevant governmental entity in that country to carry on or operate as a certification authority in that country; | |
| c) | The certificate issued by the foreign certification authority demonstrates a level of security equal to or more stringent than the level of security of a certificate issued by a licensed certification authority in Malaysia; | |
| d) | It has established a local agent for service of process in Malaysia; | |
| e) | It complies with the standards and technical requirements under the Act and its Regulations; and | |
| f) | It complies with such other requirements as
the Commission thinks fit g) Application for the Recognition of a Foreign Certification Authority. |
Application for Recognition of Foreign Certification Authorities
| a) | A foreign certification authority must apply in writing to the Commission for the recognition. | |
| b) | The application above must be accompanied by the following documents: | |
| c) | Proof that the criteria for recognition of foreign certification authorities have been satisfied, including a report from a qualified auditor certifying that the prescribed standards and technical requirements have been satisfied; | |
| d) | The prescribed fee; and | |
| e) | Such other information or document as the Commission may require. |
