Section 5A(a) in The Information Technology (Certifying Authorities) Rules, 2000
(a)The self signed certificate generated by the Controller, which begins the trust chain for the public key infrastructure, shall be used to verify the authenticity of the public key certificate of the licensed Certifying Authorities;
