Consequently a domain operator has the capacity to specify which Certification Authorities (CA) are permitted to problem a certification for a specific useful resource - combatting the abusive apply wherever a CA challenges certificates for a website that doesn’t belong into the requesting soc