CA and Subscriber key escrow are not supported. Subscriber key recovery is not supported.

Key Escrow and Recovery Policy and Practices

CA Keys can be recovered from an database and HSM backup.

Session Key Encapsulation and Recovery Policy and Practices

No stipulation.