Delegated Credentials for TLS is a new way to implement “short-lived” certificates without sacrificing the reliability of secure connections. The shorter the certificate lifetime, the less likely a certificate will need to be revoked before it expires. Mozilla, Facebook, Cloudflare, and other IETF community members have announced technical specifications for a new cryptographic protocol called “Delegated. Credentials permit holders of specially-enrolled certificates to use those certificates as a kind of sub-sub-CA to construct sub-certificates whose authority is delegated by the actual end-entity cert”
Source: https://thehackernews.com/2019/11/delegated-credentials-for-tls.html