C.5.f

WT23

A record of the pass-phrase for a CA-generated subscriber certificate is not retained beyond delivery of the certificate to the subscriber.