C.5.g

(none)

The pass-phrase for a CA-generated subscriber certificate is communicated to the subscriber in a secure manner separately from the corresponding private key.