n authority</em> (CA). CAs perform real-world due diligence to ensure credentials are only issued to actors who are whom they claim to be. In the world wide web, CAs verify that someone requesting a certificate to operate a secure web site owns and/or controls the site&#8217;s domain name before issuing such a credential. For example, before issuing a certificate for <a href="https://c2pa.org/" class="bare">https://c2pa.org/</a>, the CA verified the requestor did in fact control C2PA&#8217;s domain name bef