Section 6(1) in The Digital Signature (End entity) Rules, 2015
(1)The self signed certificate generated by the Controller, which begins the trust chain for the public key infrastructure, shall be used to verify the authenticity of the public key certificate of the licensed Certifying Authorities.
