Digital signature key-pair generation requires subscribers accepting matching certificates to apply the security procedure when creating them.

A subscriber accepting a Digital Signature Certificate that lists a public key corresponding to the subscriber's private key must generate the associated key pair by applying the security procedure. This duty links certificate acceptance to secure generation of the public and private keys underlying the certificate.

---

---

---