Information Technology Act, 2000
20. Controller to act as repository. –
(1) The Controller shall be the repository of all Digital Signature Certificates issued under this Act.
(2) The Counter shall-
(a) make use of hardware, software and procedures that are secure from intrusion and misuse;
(b) observe such other standards as may be prescribed by the Central Government.
To ensure that the secrecy and security of the digital signatures are assured.
(3) The Controller shall maintain a computerized data-base of all public keys in such a manner that such database and the public keys are available to any member of the public.