CA specific to host