A record associated with a Domain Name Server (DNS) entry that specifies the CAs that are authorized to issue certificates for that domain.
Sources:
NIST SP 1800-16B
NIST SP 1800-16C