C.5.d

(nonw)

If the CA generates certificates for its subscribers, a subscriber is immediately advised to change its certificate's pass-phrase.