law: Information Technology Act, 2000
  20. Controller to act as repository. – 
  (1) The Controller shall be the repository of
  
  all Digital Signature Certificates issued under this Act.
  (2) The Counter shall- 
  (a) make use of
  
  hardware, software and procedures that are secure from intrusion and misuse;
  (b) observe such other
  
  standards as may be prescribed by the Central Government.
  To ensure that the secrecy and security of the
  
  digital signatures are assured.
  (3) The Controller shall maintain a
  
  computerized data-base of all public keys in such a manner that such database
  
  and the public keys are available to any member of the public.