(1) A licensed certification authority shall use only a trustworthy system to issue, suspend, or revoke certificates. A licensed certification authority shall use a recognized repository to publish or give notice of the issuance, suspension, or revocation of a certificate.
(2) A licensed certification authority shall publish a certification practice statement in accordance with the rules established by the secretary. The secretary shall publish the certification practice statements of licensed certification authorities submitted as part of the licensing process in a manner similar to the publication of the certification authority disclosure record.
(3) A licensed certification authority shall knowingly employ as operative personnel only persons who have not been convicted within the past seven years of a felony and have never been convicted of a crime involving fraud, false statement, or deception. For purposes of this subsection, a certification authority knowingly employs such a person if the certification authority knew of a conviction, or should have known based on information required by rule of the secretary. Operative personnel employed by a licensed certification authority must also be persons who have demonstrated knowledge and proficiency in following the requirements of this chapter. The secretary may provide by rule for the certification of operative personnel, and provide by rule for the manner in which criminal background information is provided as part of the certification process, as well as the manner in which knowledge and proficiency in following the requirements of this chapter may be demonstrated.
[1999 c 287 § 10; 1997 c 27 § 8; 1996 c 250 § 301.]
Notes: Effective date -- 1999 c 287: See note following RCW 19.34.010.
Effective date -- Severability -- 1997 c 27: See notes following RCW 19.34.030.