I am auditing a contract manufacturer of cable assemblies. The drawing they are building to calls out certification to MIL-STD-2000, as a minimum. I know that the specification was cancelled without a superseding document, and I remember another document that states that it cannot be used in new acquisitions. The assembler that performed the assembly was certified to J-STD-001 and IPC-620 at one time, but those certifications have expired. Does the supplier have to be certified to MIL-STD-2000 or have active certification to J-STD-001 and IPC-620 to be compliant or is this a nonconformance?