I propose a system like SSH fingerprints.

Then anybody can maintain a database of "known fingerprints", and a web-of-trust can be established without depending on a centeral-point-of-censorship.

Fuck CA's. They're not and never have been trustworthy:

https://en.wikipedia.org/wiki/DigiNotar

https://en.wikipedia.org/wiki/Xcitium#Certificate_hacking

https://arstechnica.com/security/2025/06/chrome-boots-2-cert...

https://www.zdnet.com/article/google-guillotine-falls-on-cer...