Which means a domain operator has the capacity to specify which Certification Authorities (CA) are permitted to problem a certification for a particular source - combatting the abusive follow where a CA difficulties certificates for a website that doesn’t belong into the requesting occasion.