私密金鑰交付予用戶

Private key delivery to subscriber

Parties other than the Subscriber SHALL NOT archive the Subscriber Private Key without authorization by the Subscriber.

用戶（Subscriber）以外之任何一方，未經用戶授權，不得（SHALL NOT）保留（archive）用戶之私密金鑰。

If the CA or any of its designated RAs become aware that a Subscriber’s Private Key has been communicated to an unauthorized person or an organization not affiliated with the Subscriber, then the CA SHALL revoke all certificates that include the Public Key corresponding to the communicated Private Key.

若憑證機構（Certification Authority，CA）或其任何指定之註冊中心（Registration Authority，RA）獲悉用戶之私密金鑰已提供予未經授權之人員，或提供予與用戶無關聯之組織，則 CA 應（SHALL）廢止所有包含與該已提供私密金鑰相對應之公開金鑰的憑證。