Consequently a domain operator is able to specify which Certification Authorities (CA) are permitted to concern a certificate for a selected useful resource - combatting the abusive apply in which a CA challenges certificates for a website that doesn’t belong for the requesting social gatherin