One relatively new certificate management capability that many site administrators don't know about is the ability to specify which CAs are allowed to issue certificates for the domains you control. This capability is called Certificate Authority Authorization, or CAA, and it's accomplished using DNS records. Here's how it works. Your ...