[ CHAPTER 3 - CERTIFICATE ]

Article 15. Issuance of a Certificate, etc.

(1) A licensed certification authority issues a certificate to those who desire to be issued a
certificate. In such event, the licensed certification authority shall verify the identification
of the applicant, taking into account the scope of intended use and other considerations for the
certificate.

(2) A certificate issued by a licensed certification authority shall contain each of the
followi ng:

1. The subscriber's name;
2. The subscriber's public key;
3. The type of digital signature used by the subscriber and the licensed certification
authority;
4. The serial number of the certificate;
5. The effective period of the certificate;
6. The name of the licensed certification authority;
7. Matters relating to any limitation as to the scope of authorized uses; and
8. Matters relating to the agency when a subscriber is acting on behalf of a third party.

(3) Upon issuance of a certificate, a licensed certification authority shall digitally sign the
certificate using a private key that corresponds to a public key certified in accordance with
Paragraph (1) of Article 8.

(4) Upon the request of an applicant for a certificate, a licensed certification authority may
issue a certificate restricting the scope of users or usage.

(5) A licensed certification authority shall determine an appropriate effective period of a
certificate, taking into account the scope of intended users and usage and the integrity and
reliability of the technology used.

Article 16. Validity of a Certificate

(1) A certificate issued by a licensed certification authority shall become invalid :

1. If the effective period of the certificate expires;
2. If the license of a certification authority is revoked pursuant to paragraph (1) of Article 12;
3. If the effectiveness of the certificate is suspended pursuant to Article 17;
4. If the certificate is revoked pursuant to Article 18; or
5. If the certificate that is issued to a licensed certification authority by the KISA is
revoked pursuant to Paragraph (4) of Article 21.

(2) If it is necessary to achieve integrity and reliability of certification practice, the Minister
of Information and Communication may suspend the effectiveness of a certificate issued by a
licensed certification authority which has suspended or terminated its certification practice
pursuant to Article 10 or whose certification practice is suspended pursuant to Article 12.

(3) Immediately upon suspension of a certificate pursuant to Paragraph (2) hereof, the
Minister of Information and Communication shall take necessary measures to have the KISA
allow any person to verify such fact by means of the certification practice system. The same
applies to when the validity of a certificate is revoked pursuant to Subparagraph 2 of Paragraph
(1) hereof.

Article 17. Suspension of a Certificate, etc.

(1) Upon request by a subscriber or his or her agent, a licensed certification authority shall
suspend a certificate or terminate the suspension. The request for the termination of such
suspension shall be made within 6 months from the date on which the certificate is suspended.

(2) Immediately upon suspension or termination of suspension of a certificate, the licensed
certification authority shall take necessary measures to enable any person to verify such fact
by means of the certification practice system.

Article 18. Revocation of a Certificate

(1) A licensed certification authority shall revoke a certificate :

1. Upon a request of a subscriber or his or her agent for revocation of the certificate.
2. Upon becoming aware that the certificate was issued to a subscriber through fraud or
any other wrongful means.
3. Upon becoming aware that a subscriber has died or has been judicially declared missing
or has been dissolved.
4. Upon becoming aware that a subscriber's private key has been lost, compromised,
stolen or disclosed to a third party.

(2) Immediately upon revocation of a certificate, the licensed certification authority shall take
necessary measures to enable any person to verify such fact by means of the certification
practice system.