Yes, exactly. The registrar would be the obvious place for CA issuance - by definition your account there proves your ownership.<p>Heck, make it a requirement that registrars issue free SSL certificates as part of the domain registation service and we might even get to the https-everywhere world that seems to be in vogue. Double bonus if this can be engineered with a technical guarantee&#x2F;verification that only the proper registrar for a domain is a valid CA for it.