Raytheon Company Public Key Infrastructure (PKI) Certificate Policy

� Falsehood or misrepresentation of fact by the Cross Certified CA in the applicable
contractual agreements.
� Failure by the Cross Certified CA to disclose a material fact in any applicable
contractual agreement, if the misrepresentation or mission was made negligently or
with intent to deceive any party.
� The Cross Certified CA failure to protect the Cross Certified CA private key, to use a
Trustworthy System, or to otherwise take the precautions necessary to prevent the
compromise, loss, disclosure, modification, or unauthorized use of the Cross Certified
CA private key, or;
� The Cross Certified CA use of a name (including without limitation within a common
name, domain name, or e-mail address) that infringes upon the Intellectual Property
Rights of a third party.
Any applicable contractual agreement may include additional indemnity obligations.
9.9.2 Indemnification by Relying Parties
To the extent permitted by applicable law, each Relying Party shall indemnify Raytheon and its
contractors, agents, assigns, employees, officers, and directors from and against any third party
claims, liabilities, damages, costs and expenses (including reasonable attorney’s fees), relating
to or arising out of use of or reliance by Relying Party on any certificates issued by Raytheon,
including, without limitation, for:
� The Relying Party’s improper, illegal, or unauthorized use of a Certificate (including use
of any expired, revoked, or unvalidated Certificate);
� The Relying Party’s unreasonable reliance on a Certificate, under the circumstances,
or;
� The Relying Party’s failure to check the status of a Certificate on which it relies to
determine if he Certificate is expired or revoked.
Any applicable contractual agreement between Raytheon and a Relying Party with respect to
the Raytheon PKI may include additional indemnity obligations, but these obligations would not
apply to relying parties that are not customers of Raytheon.
9.10 Term and Termination
9.10.1 Term
The CP becomes effective upon recommendation of the RPMA, approval of the Raytheon Chief
Information Security Officer (CISO), and publication in the Raytheon Repository as a PDF
document. Amendments to this CP become effective upon recommendation of the RPMA,
approval of the Raytheon CISO, and publication at:
http://www.raytheon.com/pki/library/index.html
There is no specified term for this CP.
9.10.2 Termination
While this CP may be amended from time to time, it shall remain in force until replaced by a
newer version or terminated by recommendation of the RPMA and approval of the Raytheon
CISO. For purposes of clarity, termination of any Memoranda of Agreement shall not operate
80 7/25/2011