 |
Washington Administrative Code (Last Updated: November 23, 2016) |
 |
Title 434. Secretary of State |
|
Chapter 434-180. Electronic authentication. |
Section 434-180-310. Recordkeeping and retention.
Latest version.
- (1) Every licensed certification authority shall make, keep, and preserve the following records:(a) Such records as are necessary to demonstrate compliance with RCW 19.34.100 (1)(b), (c), (e), (f), and (g);(b) Such records as are necessary to demonstrate compliance with RCW 19.34.210 (1)(a), (b), and (2);(c) All notices of suspension of certificates pursuant to RCW 19.34.210(4), together with such other documents as required to demonstrate compliance with RCW 19.34.210;(d) Such records as are necessary to demonstrate compliance with RCW 19.34.250(1);(e) Such records as are necessary to demonstrate compliance with RCW 19.34.260 (1), (2), (3), (4), and (5); and(f) Such records as are necessary to demonstrate compliance with RCW 19.34.290(1).(2) Every licensed certification authority shall maintain a data base file which shall contain records of the identity of the subscriber named in each certificate issued by the certification authority, which identity is to include all the facts represented in the certificate, the date of issuance of the certificate, and number of the certificate.(3) Every licensed certification authority shall maintain a date base file of every time-stamp issued by the certification authority, to include sufficient information so that the identity of the subscriber and the item being time stamped can be identified.(4) Every licensed certification authority shall retain in a trustworthy fashion the following records for the following periods:(a) All records identified in subsections (2) and (3) of this section for a period of at least ten years after the date a certificate is revoked or expired, or after a time-stamp is affixed; and(b) All other records required to be retained under this section shall be retained for at least five years.(5) Records may be kept in the form of paper-based documents, retrievable computer-based documents, or any form of reproduction approved by the state archivist for essential records pursuant to chapter 40.10 RCW. Such records shall be indexed, stored, preserved and reproduced so as to be accurate, complete, and accessible to an auditor. Certificate extension data, referenced in X.509 section 4.2, is not required to be part of any publicly accessible record.