diff --git a/ConfigurationControlSpecification.html b/ConfigurationControlSpecification.html
index 12b4215..078f81c 100644
--- a/ConfigurationControlSpecification.html
+++ b/ConfigurationControlSpecification.html
@@ -223,17 +223,24 @@ and a registry of software under approved open source licences.
 
 <!-- This section from A.1.b -->
 
+<p> This section applies to Root and Sub-root certificates, not to End-entity (subscriber, member) certificates. </p>
+
 <h4> <a name="h5.1">5.1</a> <a name="certs_list"> Certificates List </a> </h4>
 
-<p> Root Certificates are to be listed in the CPS.  </p>
+<p> Certificates (Root and sub-root) are to be listed in the CPS.  </p>
 
 <h4> <a name="h5.2">5.2</a> <a name="logs_change"> Changes </a> </h4>
 
-<p> Creation and usage of Root Certificates is to be controlled by Security Policy.  </p>
+<p>
+Creation of Certificates
+is controlled by Security Policy.
+Usage of Certificates
+is controlled by both Security Policy and Certification Practice Statement.
+</p>
 
 <h4> <a name="h5.3">5.3</a> <a name="logs_archive"> Archive </a> </h4>
 
-<p> See Security Policy.  </p>
+<p> See Security Policy. </p>
 
 <h3> <a name="h6">6</a> <a name="Logs"> Logs </a> </h3>