Section 27

to issue, suspend or revoke a certificate;

to publish or give notice of the issuance, suspension or revocation of a certificate; and

to create a private key, whether for itself or for a subscriber.

A subscriber shall only use a trustworthy system to create a private key.

28

Disclosures on inquiry