A licensed certification authority shall make, keep, and preserve records that demonstrate compliance with:
A licensed certification authority shall maintain a database file that contains:
A licensed certification authority shall maintain a database file of certificate-related time-stamps issued by the certification authority, including the name of the subscriber, a reference to the certificate used in the transaction such as a serial number, and a description of the item being time-stamped.
All records retained under this part must be kept by the licensed certification authority for at least ten years.
Records may be inscribed on any tangible medium or stored in an electronic or other medium so long as they are retrievable, readable, accurate, complete, and accessible. The records must be indexed, stored, preserved, and reproducible so as to be authentic, reliable, complete, and accessible. Certificate extension data, referenced in X.509, is not required to be part of any publicly accessible record.
Minn. R. agency 133, ch. 8275, pt. 8275.0065
Statutory Authority: MS s 325K.01; 325K.03; 325K.04; 325K.05; 325K.06; 325K.07