This means that a site proprietor has the capacity to specify which Certification Authorities (CA) are permitted to situation a certification for a particular useful resource - combatting the abusive practice exactly where a CA troubles certificates for a domain that doesn’t belong into the requesting bash.Another interesting addition is DANE aid