This means that a site operator will be able to specify which Certificate Authorities (CA) are permitted to challenge a certificate for a particular useful resource - combatting the abusive exercise wherever a CA difficulties certificates for a website that doesn’t belong to your requesting oc