Section 38 IT Act: Revocation of Digital Signature Certificate

Section 38 of Information Technology Act: Revocation of Digital Signature Certificate

Official Bare Act Text

Override / Mandate Mens Rea (Intent) Actus Reus (Conduct) Punishment Limitation Monetary

(1) A Certifying Authority may revoke a electronic signature Certificate issued by it—

(a) where the subscriber or any other person authorized by him makes a request to that effect; or

(b) upon the death of the subscriber; or

(c) upon the dissolution of the firm or winding up of the company where the subscriber is a firm or a company.

(2) Subject to the provisions of sub-section (3) and without prejudice to the provisions of sub-section (1), a Certifying Authority may revoke a electronic signature Certificate which has been issued by it at any time, if it is of opinion that—

(a) a material fact represented in the electronic signature Certificate is false or has been concealed;

(b) a requirement for issuance of the electronic signature Certificate was not satisfied;

(c) the Certifying Authority's private key or security system was compromised in a manner materially affecting the electronic signature Certificate's reliability;

(d) the subscriber has been declared insolvent or dead, or the firm/company dissolved:

Provided that a electronic signature Certificate shall not be revoked unless the subscriber has been given a reasonable opportunity of being heard in the matter.

Legal Commentary & Landmark Judgments: Section 38

Section 38 prescribes the statutory grounds and procedure for the revocation of a Digital Signature Certificate, authorizing termination upon subscriber request, death, corporate dissolution, compromise of the private key, or discovery of fraud in certificate issuance.

Revocation Upon Subscriber Request or Demise: Mandates revocation upon request by the subscriber or their authorized representative, or upon death of the individual or dissolution of the corporate subscriber.
Substantive Grounds for Unilateral Revocation: Authorizes the CA to revoke the certificate if a material fact in the application was false, key security was compromised, or the CA's own operations cease.
Mandatory Opportunity of Showing Cause: Requires the CA to provide a reasonable opportunity of showing cause to the subscriber prior to revoking a certificate on regulatory grounds.

Key Landmark Precedents:

Venkatesh Sadasiv Pai v. SBI AIR 2003 Bom 452: Bombay High Court affirmed that revocation of electronic commercial credentials upon discovery of fraud or insolvency is an essential protective duty under cyber law.
T.K. Lathika v. Seth Karsandas Jamnadas (1999) 6 SCC 632: Supreme Court reiterated that statutory revocation powers must be exercised strictly upon the occurrence of the specific conditions precedent set out in the enactment.
Dharampal Satyapal Ltd. v. Deputy Commissioner of Central Excise (2015) 8 SCC 519: Supreme Court emphasized that statutory revocation of valuable commercial rights without notice is void for violation of natural justice.

Courtroom Practice & Strategic Litigation Guidance:

In corporate control disputes where an outgoing director refuses to hand over digital signature tokens, company counsel should immediately apply to the CA for certificate revocation under Section 38(1)(b) citing cessation of corporate authority, neutralizing unauthorized filings.

Section 38: Revocation of Digital Signature Certificate

Section 38 of Information Technology Act: Revocation of Digital Signature Certificate

Legal Commentary & Landmark Judgments: Section 38