Section 41 IT Act: Acceptance of Digital Signature Certificate
Information Technology Act, 2000
Section 41 IT Act at a Glance
Section 41 IT Act sets out when a subscriber is deemed to accept a Digital Signature Certificate and what the subscriber certifies to persons who reasonably rely on the information in that certificate.
Section 41 IT Act Bare Act Text
41. Acceptance of Digital Signature Certificate.
(1) A subscriber shall be deemed to have accepted a Digital Signature Certificate if he publishes or authorises the publication of a Digital Signature Certificate—
(a) to one or more persons;
(b) in a repository; or
otherwise demonstrates his approval of the Digital Signature Certificate in any manner.
(2) By accepting a Digital Signature Certificate the subscriber certifies to all who reasonably rely on the information contained in the Digital Signature Certificate that—
(a) the subscriber holds the private key corresponding to the public key listed in the Digital Signature Certificate and is entitled to hold the same;
(b) all representations made by the subscriber to the Certifying Authority and all material relevant to the information contained in the Digital Signature Certificate are true;
(c) all information in the Digital Signature Certificate that is within the knowledge of the subscriber is true.
Section 41 IT Act in Simple Words
Section 41 IT Act sets out two rules: when a subscriber is deemed (treated by law as having) accepted a Digital Signature Certificate, and what the subscriber certifies by accepting it. Under Section 41(1) IT Act, a subscriber is deemed to have accepted a Digital Signature Certificate if the subscriber publishes or authorises the publication of the certificate (a) to one or more persons, or (b) in a repository, or if the subscriber otherwise demonstrates approval of the Digital Signature Certificate in any manner.
Under Section 41(2) IT Act, by accepting a Digital Signature Certificate, the subscriber makes three certifications to all persons who reasonably rely on the information contained in the certificate. First, under Section 41(2)(a) IT Act, the subscriber certifies that the subscriber holds the private key corresponding to the public key listed in the Digital Signature Certificate and is entitled to hold that private key. Second, under Section 41(2)(b) IT Act, the subscriber certifies that all representations made by the subscriber to the Certifying Authority and all material relevant to the information contained in the certificate are true. Third, under Section 41(2)(c) IT Act, the subscriber certifies that all information in the Digital Signature Certificate that is within the knowledge of the subscriber is true.
Acceptance under Section 41 IT Act connects directly to surrounding provisions of the Act. Under Section 40 IT Act, acceptance of a Digital Signature Certificate triggers the subscriber's duty to generate the corresponding key pair by applying the security procedure, while Section 42 IT Act addresses control of the private key and Section 38(2)(a) IT Act allows revocation where a material fact represented in a Digital Signature Certificate is false or concealed.
When Section 41 IT Act Applies
- Deemed acceptance by publication: the subscriber publishes or authorises publication of the Digital Signature Certificate to one or more persons or in a repository (Section 41(1)(a) and (b) IT Act).
- Deemed acceptance by conduct: the subscriber otherwise demonstrates approval of the Digital Signature Certificate in any manner (Section 41(1) IT Act).
- Reliance standard: the subscriber's certifications under Section 41(2) IT Act are made to all persons who reasonably rely on the information in the Digital Signature Certificate.
- Key certification: the subscriber holds, and is entitled to hold, the private key corresponding to the public key listed in the certificate (Section 41(2)(a) IT Act).
- Truth of representations and material: all representations made by the subscriber to the Certifying Authority and all material relevant to the certificate's information are true (Section 41(2)(b) IT Act).
- Truth of certificate information: all information in the Digital Signature Certificate within the subscriber's knowledge is true (Section 41(2)(c) IT Act).
Example of Section 41 IT Act
FAQs on Section 41 IT Act
What is Section 41 IT Act?▼
Section 41 IT Act states when a subscriber is deemed to have accepted a Digital Signature Certificate through publication, authorised publication, or any other demonstration of approval. Section 41 IT Act also sets out the three certifications a subscriber makes upon acceptance to everyone who reasonably relies on the information in that certificate.
Does a subscriber have to publish a Digital Signature Certificate in a repository to accept it under Section 41 IT Act?▼
No. Under Section 41(1) IT Act, a subscriber is also deemed to have accepted a Digital Signature Certificate by publishing or authorising its publication to one or more persons, or by otherwise demonstrating approval of the certificate in any manner.
To whom does a subscriber make certifications upon accepting a Digital Signature Certificate under Section 41(2) IT Act?▼
To all who reasonably rely on the information in the certificate. Section 41(2) IT Act extends the subscriber's certifications to every person who reasonably relies on the information contained in the Digital Signature Certificate.
Does Section 41(2)(c) IT Act make the subscriber certify information in the certificate outside the subscriber's knowledge?▼
No. While Section 41(2)(b) IT Act covers all representations made by the subscriber to the Certifying Authority and all relevant material, Section 41(2)(c) IT Act covers all information in the Digital Signature Certificate that is within the knowledge of the subscriber.
Have questions about Section 41 IT Act?
Ask NyayGuru about your situation and get an answer based on the Information Technology Act, 2000.
Ask NyayGuru →Disclaimer: This is for informational purposes only. Always consult a qualified advocate for legal advice.
Sources: Bare Act Text, Information Technology Act, 2000 ·