So it aims to replace both DNS (a way of looking up IP address for a hostname) as well as certificate authorities (a way of knowing if the SSL cert being used by your connection is 'good')?

Its an alternative DNS, with a method to use that alternative DNS as a way of authorizing ssl certs too?