translate English to French: Thus when a CA updates its key pair it must generate two extra cACertificate attribute values if certificates are made available using an X.500 directory for a total of four:
•