This means that a domain owner has the capacity to specify which Certificate Authorities (CA) are allowed to concern a certificate for a particular useful resource - combatting the abusive observe where a CA issues certificates for a website that doesn’t belong into the requesting celebration.