Using Authentication Authority in a Domain Name

For an internal certific authority, you typically use something related to your company name or the like. You also have things like, for example, paloalto firewalls and such, will use their own setive authorities and name them Paloalto. In the end, you still need to accept those bad sort of authorities. And a blog posed by net spy has details regarding a volability in asiar active directory that leaked ap registration certificates in certain circumstances.