It does but only through the CertificationPrimaryKey object. Apart from that, updating an identifier is something you shouldn't do at all. Not sure if the behavior is defined when you do that, but normally you would remove the old and add a new object when the identifier would change.