C.5.a

WT19

If the CA generates certificates for its subscribers, all requirements for signing subscriber certificates are met (see §C.6).