ClaimCERT
  I am authorized to certify $pubKey for $domain
StatementCERT
  X.509 Certificate
ClaimantCERT
  Certificate Authority
BelieverCERT
  Web Browser
VerifierCERT
  Domain Owner: I am authorized to certify $pubKey for $domain
ArbiterCERT
  Browser Vendor

ClaimLOG_CERT
  1. This data structure is append-only from any previous version
  2. This data structure is globally consistent
  3. This data structure contains only leaves of type `X.509 Certificate`
StatementLOG_CERT
  Log Checkpoint
ClaimantLOG_CERT
  Log Operator
BelieverLOG_CERT
  - Web Browser
  - Domain Owner
VerifierLOG_CERT
  - Witness: This data structure is append-only from any previous version
  - Witness Quorum: This data structure is globally consistent
  - Domain Owner: This data structure contains only leaves of type `X.509 Certificate`
ArbiterLOG_CERT
  Browser Vendor