By accepting a certificate issued by a licensed certification authority, the subscriber identified in the certificate assumes a duty to exercise reasonable care to retain control of the private key and prevent its disclosure to a person not authorized to create the subscriber's digital signature.
A certification authority cannot hold a private key on behalf of a subscriber.
Official Publication of the State of Minnesota
Revisor of Statutes