From 2a409fbb7493010819d9f64ec400cdec9c03f95f Mon Sep 17 00:00:00 2001
From: Ian Grigg <iang@cacert.org>
Date: Tue, 13 Apr 2010 09:36:14 +0000
Subject: [PATCH] better wording --This line, and thos  below, will be
 ignored--

M    ConfigurationControlSpecification.html


git-svn-id: http://svn.cacert.org/CAcert/Policies@1870 14b1bab8-4ef6-0310-b690-991c95c89dfd
---
 ConfigurationControlSpecification.html | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/ConfigurationControlSpecification.html b/ConfigurationControlSpecification.html
index 12b4215..078f81c 100644
--- a/ConfigurationControlSpecification.html
+++ b/ConfigurationControlSpecification.html
@@ -223,17 +223,24 @@ and a registry of software under approved open source licences.
 
 <!-- This section from A.1.b -->
 
+<p> This section applies to Root and Sub-root certificates, not to End-entity (subscriber, member) certificates. </p>
+
 <h4> <a name="h5.1">5.1</a> <a name="certs_list"> Certificates List </a> </h4>
 
-<p> Root Certificates are to be listed in the CPS.  </p>
+<p> Certificates (Root and sub-root) are to be listed in the CPS.  </p>
 
 <h4> <a name="h5.2">5.2</a> <a name="logs_change"> Changes </a> </h4>
 
-<p> Creation and usage of Root Certificates is to be controlled by Security Policy.  </p>
+<p>
+Creation of Certificates
+is controlled by Security Policy.
+Usage of Certificates
+is controlled by both Security Policy and Certification Practice Statement.
+</p>
 
 <h4> <a name="h5.3">5.3</a> <a name="logs_archive"> Archive </a> </h4>
 
-<p> See Security Policy.  </p>
+<p> See Security Policy. </p>
 
 <h3> <a name="h6">6</a> <a name="Logs"> Logs </a> </h3>