Which means a site operator can specify which Certification Authorities (CA) are allowed to issue a certificate for a specific resource - combatting the abusive apply the place a CA issues certificates for a domain that doesn’t belong into the requesting occasion. The final rule also points