General Provisions

2.8 Confidentiality

The CCA collects information about the CAs as part of the application. These data are processed in a way that ensures protection of their private information. All information other than what is published in their license and digital signature certificate, and in CRL is kept in confidence.

2.8.1 Types of information to be kept confidential
The following information shall be confidential namely:

• CA license application, whether approved or rejected;
• CA license application information collected from the CA or elsewhere as part of the registration and verification process but not included in the Digital Signature Certificate information;

2.8.2 Types of information not considered confidential
Information included in public certificates and CRLs of Licensed CAs issued by the RCAI is not considered confidential.

2.8.3 Disclosure of certificate revocation/suspension information
When a certificate is revoked/suspended, a reason code shall be included in the CRL entry for the action. This reason code is not considered confidential and may be shared with all other users and relying parties. However, no other details concerning the revocation are disclosed.

2.8.4 Release to law enforcement officials
Confidential Information shall only be released by the CCA to courts and law enforcement agencies in accordance with applicable legal requirements.

2.8.5 Release as part of civil discovery
No Stipulation.

2.8.6 Disclosure upon owner's request
The information related to the CA's certificate would be disclosed by the CCA to a third party, only when required by the CA, with a signed request.

2.8.7 Other information release circumstances
No Stipulation.

2.9 Intellectual Property Rights

No right or interest in any intellectual property rights are granted to any Licensed CA or any relying party. All rights in intellectual property are reserved . Any content copied from this document should include reference to this source.

Intellectual property rights on the items listed below belong to the CCA according to the Copyright Act and other related regulations:

• Software and hardware developed by CCA
• Certification Practice Statement of CCA
• Name of CCA
• Corporate Name
• Internet Domain Name
• Key pairs created by CCA