Subdivision 1.Suspension for 96 hours.

Unless the certification authority and the subscriber agree otherwise, the licensed certification authority that issued a certificate that is not a transactional certificate must suspend the certificate for a period not to exceed 96 hours:

Attorney's Note

Under the Minnesota Statutes, punishments for crimes depend on the classification. In the case of this section:
ClassPrisonFine
Misdemeanorup to 90 daysup to $1,000
For details, see § 609.02

Terms Used In Minnesota Statutes 325K.14

  • Certificate: means a computer-based record that:

    (1) identifies the certification authority issuing it;

    (2) names or identifies its subscriber;

    (3) contains the subscriber's public key; and

    (4) is digitally signed by the certification authority issuing it. See Minnesota Statutes 325K.01

  • Certification authority: means a person who issues a certificate. See Minnesota Statutes 325K.01
  • Confirm: means to ascertain through appropriate inquiry and investigation. See Minnesota Statutes 325K.01
  • Contract: A legal written agreement that becomes binding when signed.
  • Evidence: Information presented in testimony or in documents that is used to persuade the fact finder (judge or jury) to decide the case for one side or the other.
  • Licensed certification authority: means a certification authority to whom a license has been issued by the secretary and whose license is in effect, or a certification authority who operates under a license issued by a governmental entity which has been certified pursuant to section 325K. See Minnesota Statutes 325K.01
  • Person: means a human being or an organization capable of signing a document, either legally or as a matter of fact. See Minnesota Statutes 325K.01
  • Private key: means the key of a key pair used to create a digital signature. See Minnesota Statutes 325K.01
  • Publish: means to record or file in a repository. See Minnesota Statutes 325K.01
  • Recognized repository: means a repository recognized by the secretary under section 325K. See Minnesota Statutes 325K.01
  • Repository: means a system for storing and retrieving certificates and other information relevant to digital signatures. See Minnesota Statutes 325K.01
  • Secretary: means the Minnesota secretary of state. See Minnesota Statutes 325K.01
  • Subscriber: means a person who:

    (1) is the subject listed in a certificate;

    (2) accepts the certificate; and

    (3) holds a private key that corresponds to a public key listed in that certificate. See Minnesota Statutes 325K.01

  • Suspend a certificate: means to make a certificate ineffective temporarily for a specified time forward. See Minnesota Statutes 325K.01
  • Transactional certificate: means a valid certificate incorporating by reference one or more of the digital signatures. See Minnesota Statutes 325K.01

(1) upon request by a person identifying himself or herself as the subscriber named in the certificate, or as a person in a position likely to know of a compromise of the security of a subscriber’s private key, such as an agent, business associate, employee, or member of the immediate family of the subscriber; or

(2) by order of the secretary under section 325K.10.

The certification authority need not confirm the identity or agency of the person requesting suspension.

Subd. 2.Suspension for 96 hours; other causes.

(a) The secretary may suspend a certificate issued by a licensed certification authority for a period of 96 hours, if:

(1) a person identifying himself or herself as the subscriber named in the certificate or as an agent, business associate, employee, or member of the immediate family of the subscriber requests suspension; and

(2) the requester represents that the certification authority that issued the certificate is unavailable.

(b) The secretary may require the person requesting suspension to provide evidence, including a statement under oath or affirmation, regarding the requester’s identity, authorization, or the unavailability of the issuing certification authority, and may decline to suspend the certificate in its discretion. The secretary or law enforcement agencies may investigate suspensions by the secretary for possible wrongdoing by persons requesting suspension.

Subd. 3.Notice of suspension.

Immediately upon suspension of a certificate by a licensed certification authority, the licensed certification authority shall give notice of the suspension according to the specification in the certificate. If one or more repositories are specified, then the licensed certification authority must publish a signed notice of the suspension in all the repositories. If a repository no longer exists or refuses to accept publication, or if no repository is recognized under section 325K.25, the licensed certification authority must also publish the notice in a recognized repository. If a certificate is suspended by the secretary, the secretary must give notice as required in this subdivision for a licensed certification authority, provided that the person requesting suspension pays in advance any fee required by a repository for publication of the notice of suspension.

Subd. 4.Terminating suspension.

A certification authority must terminate a suspension initiated by request only:

(1) if the subscriber named in the suspended certificate requests termination of the suspension and the certification authority has confirmed that the person requesting suspension is the subscriber or an agent of the subscriber authorized to terminate the suspension; or

(2) when the certification authority discovers and confirms that the request for the suspension was made without authorization by the subscriber. However, this clause does not require the certification authority to confirm a request for suspension.

Subd. 5.Contract limitation or preclusion.

The contract between a subscriber and a licensed certification authority may limit or preclude requested suspension by the certification authority, or may provide otherwise for termination of a requested suspension. However, if the contract limits or precludes suspension by the secretary when the issuing certification authority is unavailable, the limitation or preclusion is effective only if notice of it is published in the certificate.

Subd. 6.Misrepresentation.

No person may knowingly or intentionally misrepresent to a certification authority the person’s identity or authorization in requesting suspension of a certificate. Violation of this subdivision is a misdemeanor.

Subd. 7.

[Repealed, 1998 c 321 s 31]

Subd. 8.Completion of suspension.

A suspension under this section must be completed within 24 hours of receipt of all of the information required in this section.

Subd. 9.Administrative procedures.

For purposes of this section, the provisions of chapter 14 do not apply when the secretary acts as a licensed certification authority for governmental entities.