Answer:
The correct answer is 3. DANE
Explanation:
DNS-based Authentication of Named Entities (DANE) allows you (as a domain owner) to specify the possible certification authorities that are allowed to generate a certificate for your domain.
DNS-based Authentication of Named Entities is an Internet security protocol to allow X.509 digital certificates, commonly used for Transport Layer Security, to be bound to domain names using Domain Name System Security Extensions.