Certification of secure RSA keys

A method of joint RSA key generation by a user and a certification authority (CA) is proposed. The CA is convinced that a user's key has been well generated, but does not obtain significant information about the user's secret RSA decryption key.