Information Technology Act,2000
20. Controller to act as repository. –
(1) The Controller shall be the repository of all Digital Signature Certificates issued under this Act.
(2) The Counter shall- (a) make use of hardware, software and procedures that are secure from intrusion and misuse;
(b) observe such other standards as may be prescribed by the Central Government.
To ensure that the secrecy and security of the digital signatures are assured.
(3) The Controller shall maintain a computerised data-base of all public keys in such a manner that such database and the public keys are available to any member of the public.