Raytheon Company Public Key Infrastructure (PKI) Certificate Policy

� There are no material misrepresentations of fact in the Cross Certificates known to or
originating from the entity approving the Cross Certification Applications or issuing
the Cross Certificates.
� There are no errors in the information in the Cross Certificate that were introduced by
the entity approving the Cross Certification Application or issuing the Cross
Certificate as a result of a failure to exercise reasonable care in managing the
Certificate Application or creating the Certificate.
� Its Certificates meet all material requirements of this CP.
� Revocation services and use of a repository conform to the applicable CPS in all
material respects.
� The CA signing private key is protected and that no unauthorized person has ever
had access to the private key;
� All representations made by the Raytheon CA in any applicable agreements are true
and accurate in all material respects;
� All information supplied by the Subscribers and CA subjects in connection with,
and/or contained in the Certificate is true and accurate in all material respects.
� The Certificates are being used by the CA exclusively for authorized and legal
purposes, consistent with this CP and applicable CPS.
The applicable contractual agreements may include additional representations and warranties.
9.6.1.2 Raytheon Subordinate or Cross-Certified CA
Raytheon represents and warrants that, to its knowledge:
� The CA signing key is protected and that no unauthorized person has ever had
access to that private key.
� All representations made with respect to a Raytheon CA in the applicable
agreements are true and accurate, in all material respects.
� All information supplied by the Subscribers and Subject CAs in connection with,
and/or contained in the Certificate is true and accurate in all material respects;
� The Certificates are being used by the CA exclusively for authorized and legal
purposes, consistent with this CP or applicable CPS.
9.6.2 Subscriber
A Subscriber shall be required to sign a document (e.g., a subscriber agreement) requiring that
the Subscriber satisfy certain obligations including, but not limited to:
� Subscriber shall accurately represent itself in all communications with the PKI
authorities.
� Subscriber shall promptly notify the appropriate CA upon suspicion of loss or
compromise of their private keys. Such notification shall be made directly or
indirectly through mechanisms consistent with the CA’s CPS
In signing the document described above, each Subscriber shall represent and warrant that:
� The data contained in any certificates issued to Subscriber is accurate;
� The Subscriber lawfully holds the private key corresponding to public key identified in
the Subscriber’s certificate;
77 7/25/2011