Good article on the weakness of the existing Certificate Authority system.
Unmitigated Risk
Trusted Everywhere, Impact Everywhere
WebPKI certificate concentration, reliance, sovereign trust, historical CA incidents, and the quantum transition.