The Certificate Authority System has been proven to be broken and many people have done papers with ideas how to fix it. ย A few ideas has been turned into actual software.
Here is the public key for my site’s SSL cert along with GPG signature for the file: