yes, too much centralization in free SSL

I like ZeroSSL but its 90 day renewals for free domain certs

CACert is another option but root certificate authority recognition is limited