SC-17—Public Key Infrastructure Certificates

Issue public key certificates under an ⚙organization-defined certificate policy or obtain public key certificates from an approved service provider; and

Include only approved trust anchors in trust stores or certificate stores managed by the organization.