From f02e793d0a169e0bc405fda5db1e680d85a64b79 Mon Sep 17 00:00:00 2001
From: Aaron Gable <aaron@letsencrypt.org>
Date: Thu, 29 Oct 2026 11:15:10 -0700
Subject: [PATCH] Add note about ISRG being its own Subscriber

---
 CP-CPS.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CP-CPS.md b/CP-CPS.md
index 8c46723..adffd23 100644
--- a/CP-CPS.md
+++ b/CP-CPS.md
@@ -848,7 +848,7 @@ See the Let's Encrypt Subscriber Agreement for information regarding Subscriber
 
 ### 6.1.2 Private key delivery to subscriber
 
-ISRG never generates or has access to Subscriber Private Keys.
+ISRG never generates or has access to Subscriber Private Keys, except in cases where ISRG is the Subscriber (such as for test sites).
 
 ### 6.1.3 Public key delivery to certificate issuer