(1) The secretary must recognize one or more repositories, after finding that a repository to be recognized:

     (a) Is a licensed certification authority;

     (b) Includes, or will include, a database containing:

     (i) Certificates published in the repository;

     (ii) Notices of suspended or revoked certificates published by licensed certification authorities or other persons suspending or revoking certificates; and

     (iii) Other information adopted by rule by the secretary;

     (c) Operates by means of a trustworthy system, that may, under administrative rule of the secretary, include additional or different attributes than those applicable to a certification authority that does not operate as a recognized repository;

     (d) Contains no significant amount of information that is known or likely to be untrue, inaccurate, or not reasonably reliable;

     (e) Keeps a record of certificates that have been suspended or revoked, or that have expired, in accordance with requirements adopted by rule by the secretary; and

     (f) Complies with other reasonable requirements adopted by rule by the secretary.

     (2) A repository may apply to the secretary for recognition by filing a written request and providing evidence to the secretary sufficient for the secretary to find that the conditions for recognition are satisfied, in accordance with requirements adopted by rule by the secretary.

     (3) A repository may discontinue its recognition by filing thirty days' written notice with the secretary, upon meeting any conditions for discontinuance adopted by rule by the secretary. In addition the secretary may discontinue recognition of a repository in accordance with the administrative procedure act, chapter 34.05 RCW, if the secretary concludes that the repository no longer satisfies the conditions for recognition listed in this section or in rules adopted by the secretary.

[1999 c 287 § 16; 1997 c 27 § 23; 1996 c 250 § 501.]

NOTES:

     Effective date -- 1999 c 287: See note following RCW 19.34.010.

     Effective date -- Severability -- 1997 c 27: See notes following RCW 19.34.030.