Here is draft language that could be added to BR Section 1.3.3, Subscribers. In some situations, a CA acts as an Applicant or Subscriber, for instance, when it generates and protects a Private Key, requests a Certificate, accepts Terms of Use, demonstrates control of a Domain, or obtains a Certificate for its own use. Ben