You mean like a CA? Of course they could do that, but then it wouldn't be Windows Certified (it would just be Somebody-Else Certified), which is how OEMs want to brand their products. This is all about dealing with Microsoft's hegemony.