I don't think this is correct.  If I register and set up my system, then a new product certificate is written to /etc/pki/product, and I run "subman status"  It may report my system as green because it doesn't know about the new product yet.