Any CA can generate a cert for any domain. This is one of the problems with the current CA system.