C.3.d WT18 The root certificate private key is stored by the CA and not by any outside party.