CAs would not be allowed to use those TLDs under the current rules. They have two options for testing: 1. Use domains they own. 2. Use a testing environment

CAs would not be allowed to use those TLDs under the current rules. They have two options for testing: 1. Use domains they own. 2. Use a testing environment that doesn't issue publicly-trusted certificates.