If you have an url registered with one company, but the site hosted by another, who do you buy the security cert from? The registrar or the host?
I actually know very little about them - other than that a website that has one shouldn’t put a computer in danger of being affected by a deadly virus.
From a place like DigiCert.