I have seen multiple questions focusing on multiple certificates for a single domain (e.g.:
However, what stops an individual from purchasing a certificate and certifying a site they do not own?
For example: site
xxx.com has a certificate issued to them from a root CA. What stops me from registering that site
xxx.com, with another CA?