The organizational separation between operators of TLS and DTLS endpoints and the certification authority can create limitations.