The private key of the DutchGrid medium-security Certification Authority is stored in encrypted form only, and protected by a pass phrase of at least 15 characters.