(1) Unless the certification authority provides otherwise in the certificate or its certification practice statement, the licensed certification authority that issued a certificate that is not a transactional certificate must suspend the certificate for a period not to exceed five business days:
(a) Upon request by a person whom the certification authority reasonably believes to be: (i) The subscriber named in the certificate; (ii) a person duly authorized to act for that subscriber; or (iii) a person acting on behalf of the unavailable subscriber; or
(b) By order of the secretary under RCW 19.34.210(7).
The certification authority need not confirm the identity or agency of the person requesting suspension. The certification authority may require the person requesting suspension to provide evidence, including a statement under oath or affirmation, regarding the requestor's identity, authorization, or the unavailability of the subscriber. Law enforcement agencies may investigate suspensions for possible wrongdoing by persons requesting suspension.
(2) Unless the certification authority provides otherwise in the certificate or its certification practice statement, the secretary may suspend a certificate issued by a licensed certification authority for a period not to exceed five business days, if:
(a) A person identifying himself or herself as the subscriber named in the certificate, a person authorized to act for that subscriber, or a person acting on behalf of that unavailable subscriber requests suspension; and
(b) The requester represents that the certification authority that issued the certificate is unavailable.
The secretary may require the person requesting suspension to provide evidence, including a statement under oath or affirmation, regarding his or her identity, authorization, or the unavailability of the issuing certification authority, and may decline to suspend the certificate in its discretion. Law enforcement agencies may investigate suspensions by the secretary for possible wrongdoing by persons requesting suspension.
(3) Immediately upon suspension of a certificate by a licensed certification authority, the licensed certification authority must give notice of the suspension according to the specification in the certificate. If one or more repositories are specified, then the licensed certification authority must publish a signed notice of the suspension in all the repositories. If a repository no longer exists or refuses to accept publication, or if no repository is recognized under RCW 19.34.400, the licensed certification authority must also publish the notice in a recognized repository. If a certificate is suspended by the secretary, the secretary must give notice as required in this subsection for a licensed certification authority, provided that the person requesting suspension pays in advance any fee required by a repository for publication of the notice of suspension.
(4) A certification authority must terminate a suspension initiated by request only:
(a) If the subscriber named in the suspended certificate requests termination of the suspension, the certification authority has confirmed that the person requesting suspension is the subscriber or an agent of the subscriber authorized to terminate the suspension; or
(b) When the certification authority discovers and confirms that the request for the suspension was made without authorization by the subscriber. However, this subsection (4)(b) does not require the certification authority to confirm a request for suspension.
(5) The contract between a subscriber and a licensed certification authority may limit or preclude requested suspension by the certification authority, or may provide otherwise for termination of a requested suspension. However, if the contract limits or precludes suspension by the secretary when the issuing certification authority is unavailable, the limitation or preclusion is effective only if notice of it is published in the certificate.
(6) No person may knowingly or intentionally misrepresent to a certification authority his or her identity or authorization in requesting suspension of a certificate. Violation of this subsection is a gross misdemeanor.
(7) The secretary may authorize other state or local governmental agencies to perform any of the functions of the secretary under this section upon a regional basis. The authorization must be formalized by an agreement under chapter 39.34 RCW. The secretary may provide by rule the terms and conditions of the regional services.
(8) A suspension under this section must be completed within twenty-four hours of receipt of all information required in this section.
[2000 c 171 § 51; 1999 c 287 § 13; 1997 c 27 § 12; 1996 c 250 § 306.]
Notes: Effective date -- 1999 c 287: See note following RCW 19.34.010.
Effective date -- Severability -- 1997 c 27: See notes following RCW 19.34.030.