C.5.c

WT22

If the CA generates certificates for its subscribers, a subscriber's private key is communicated to the subscriber in a secure manner.