Note: For purposes of determining the appropriate domain name level or Domain Namespace, the registerable

Domain Name is the second-level domain for generic top-level domains (gTLD) such as .com, .net, or .org, or, if the

Fully Qualified Domain Name contains a 2 letter Country Code Top-Level Domain (ccTLD), then the domain level

is whatever is allowed for registration according to the rules of that ccTLD.

Each dNSName in permittedSubtrees must be a registered domain (with zero or more subdomains) according to the Public Suffix List algorithm.

A public suffix list for the purposes of determining the Organizational Domain can be obtained from various sources. The most common one is maintained by the Mozilla Foundation and made public at http://publicsuffix.org. License terms governing the use of that list are available at that URI.

Note that if operators use a variety of public suffix lists, interoperability will be difficult or impossible to guarantee.

Public suffix: "A domain that is controlled by a public registry."

(Quoted from [RFC6265], Section 5.3) A common definition for this

term is a domain under which subdomains can be registered, and on

which HTTP cookies ([RFC6265]) should not be set. There is no

indication in a domain name whether it is a public suffix; that

can only be determined by outside means. In fact, both a domain

and a subdomain of that domain can be public suffixes. At the

time this document is published, the IETF DBOUND Working Group

[DBOUND] is dealing with issues concerning public suffixes.

There is nothing inherent in a domain name to indicate whether it

is a public suffix. One resource for identifying public suffixes

is the Public Suffix List (PSL) maintained by Mozilla

(http://publicsuffix.org/).

For example, at the time this document is published, the "com.au"

domain is listed as a public suffix in the PSL. (Note that this

example might change in the future.)

Note that the term "public suffix" is controversial in the DNS

community for many reasons, and may be significantly changed in

the future. One example of the difficulty of calling a domain a

public suffix is that designation can change over time as the

registration policy for the zone changes, such as the case of the

"uk" TLD around the time this document is published.

NOTE: A "public suffix" is a domain that is controlled by a

public registry, such as "com", "co.uk", and "pvt.k12.wy.us".

This step is essential for preventing attacker.com from

disrupting the integrity of example.com by setting a cookie

with a Domain attribute of "com". Unfortunately, the set of

public suffixes (also known as "registry controlled domains")

changes over time. If feasible, user agents SHOULD use an

up-to-date public suffix list, such as the one maintained by

the Mozilla project at http://publicsuffix.org/.

Per the request of lib.de.us, move it from the ICANN section to the PRIVATE section. This is because some browsers, such as Chrome, prevent wildcard certificates for domains in the ICANN section. lib.de.us centrally manages the infrastructure, and thus hosts a wildcard, but subdomains host independent content and thus need the separation afforded by being on the PSL.

This also moves the KRD entries to the PRIVATE section, to facilitate

the script automation.

au.comは1990年台半ば、アンビューエル・ウラキーというコンサル会社が所有しており、2000年前後にオーストラリアの略としてセカンドレベルドメインの形でサブドメインが販売されいた。KDDIの買収前はNetRegistryという会社が管理していたが、販売が中止され、こちらのフォーラムによると2013年ごろにKDDIにドメイン所有権が移転された模様。買収額などは不明。

The main limit is Certificates per Registered Domain (20 per week). A registered domain is, generally speaking, the part of the domain you purchased from your domain name registrar. For instance, in the name www.example.com, the registered domain is example.com. In new.blog.example.co.uk, the registered domain is example.co.uk. We use the Public Suffix List to calculate the registered domain.