A record associated with a Domain Name Server (DNS) entry that specifies the CAs that are authorized to issue certificates for that domain.
Source(s):
NIST SP 1800-16B
NIST SP 1800-16C