Under Section?68, refusal or failure to comply with lawful orders from the Controller of Certifying Authorities (e.g., cease operations) is punishable by up to two years? imprisonment, ?200,000 fine, or both. It enforces regulatory authority oversight in digital certification.