Allow the eIDAS certificates, but limit them to the country code TLDs to match the jurisdiction of the certificate issuer.