1. 1. By accepting a certificate issued by a licensed certification authority, the subscriber identified in the certificate assumes a duty to exercise reasonable care to retain control of the private key and prevent its disclosure to any person not authorized to create the subscriber's digital signature.
2. 2. A private key is the personal property of the subscriber who rightfully holds it.
3. 3. If a certification authority holds the private key corresponding to a public key as a fiduciary of the subscriber named in the certificate, the certification authority may use that private key only with the subscriber's prior, written approval, unless the subscriber expressly permits the certification authority to hold the private key according to other terms.

(L. 1998 S.B. 680 § 13)