PART IV - DUTIES OF LICENSED CERTIFICATION AUTHORITIES AND SUBSCRIBERS CHAPTER 4 - Control in private key
Section 43. Duty of subscriber to keep private key secure.
By accepting a certificate issued by a licensed certification authority, the subscriber named in the certificate assumes a duty to exercise reasonable care to retain control of the private key and prevent its disclosure to any person not authorized to create the subscriber's digital signature.