Certification authority: A certification authority (CA) is an entity that issues that issues digital certificates used to ...

Certification authority: A certification authority (CA) is an entity that issues that issues digital certificates used to create digital signatures and public-private key pairs. 

When IPsec is required for DNS queries, the CA is used to determine the authenticity of the DNS server. Only one CA can be used.