ACP 185

UNCLASSIFIED
ANNEX A TO
ACP 185
1.21.6 Publication of the renewal certificate by the CA
CA Certificates and Subscriber appropriate certificates shall be published to appropriate
repositories, including those needed to support cross-certification with the NDPKI of another
CCEB nation.
1.21.7 Notification of certificate issuance by the CA to other entities
NDPKI shall notify other NDPKIs when renewing a cross-certificate.
1.22 Certificate Re-Key
1.22.1 Circumstance for certificate re-key
Circumstances for certificate re-key, shall be defined by the NDPKI PMA.
The NDPKI PMA shall define which circumstances initiating re-key require revocation of the
current certificate.
1.22.2 Who may request certification of a new public key
Certificate re-key may be requested by the:
• NDPKI PMA.
• Subscriber or the PKI Sponsor
• CMA on behalf of the Subscriber.
1.22.3 Processing certificate re-keying requests
The certificate rekey processes shall be dealt with in accordance with NDPKI CP .
1.22.4 Notification of new certificate issuance to Subscriber
If the Subscriber does not directly participate in the process, the PKI shall notify the Subscriber
of the issuance of a new certificate. Where the Subscriber directly participates in the issue of the
renewed certificate there is no stipulation.
1.22.5 Conduct constituting acceptance of a re-keyed certificate
The Subscriber’s failure to object to the issuance of the rekeyed certificate shall constitute
acceptance. Use of the certificate constitutes acceptance.
Uncontrolled copy when printed
1.22.6 Publication of the re-keyed certificate by the CA
Re-keyed CA Certificates and Subscriber appropriate certificates shall be published to
appropriate repositories, including those needed to support cross-certification with the NDPKI of
another CCEB nation.
A-13
UNCLASSIFIED