Yes, exactly. The registrar would be the obvious place for CA issuance - by definition your account there proves your ownership. Heck, make it a requirement th

Yes, exactly. The registrar would be the obvious place for CA issuance - by definition your account there proves your ownership. Heck, make it a requirement that registrars issue free SSL certificates as part of the domain registation service and we might even get to the https-everywhere world that seems to be in vogue. Double bonus if this can be engineered with a technical guarantee/verification that only the proper registrar for a domain is a valid CA for it.