Raytheon Company Public Key Infrastructure (PKI) Certificate Policy

4.7.4 Notification of New Certificate Issuance to Subscriber
See Section 4.3.2.
4.7.5 Conduct Constituting Acceptance of a Re-keyed Certificate
See Section 4.4.1.
4.7.6 Publication of the Re-keyed Certificate by the CA
See Section 4.4.2.
4.7.7 Notification of Certificate Issuance by the CA to Other Entities
See Section 4.4.3.
4.8 Certificate Modification
Updating a certificate means creating a new certificate that has the same or a different key and
a different serial number, and that it differs in one or more other fields, from the old certificate.
For example, a CA may choose to update a certificate of a Subscriber whose characteristics
have changed (e.g., has just received a medical degree). The old certificate may or may not be
revoked, but must not be further re-keyed, renewed, or updated.
Further, if an individual’s name changes (e.g., due to marriage), then proof of the name change
must be provided to the Registration Authority or Trusted Agent in order for an updated
certificate having the new name to be issued.
4.8.1 Circumstance for Certificate Modification
A CA may issue a new certificate to the Subject when some of the Subject information has
changed, e.g., name change due to change in marital status, change in subject attributes, etc.,
and the Subject continues to be entitled to a certificate.
4.8.2 Who may Request Certificate Modification
A Subject may request modification of its certificate.
A PKI Sponsor may request modification of a component certificate.
4.8.3 Processing Certificate Modification Requests
A certificate modification shall be achieved using one of the following processes:
� Initial registration process as described in Section 3.2; or
� Identification & Authentication for Re-key as described in Section 3.3. In addition, the
validation of the changed subject information shall be in accordance with the initial
identity-proofing process as described in Section 3.2.
For cross certificates issued by a Raytheon CA, certificate re-key also requires that a valid MOA
exists between Raytheon and the cross certified PKI, and the term of the MOA is beyond the
expiry period for the new certificate.
4.8.4 Notification of New Certificate Issuance to Subscriber
See Section 4.3.2.
35 7/25/2011