while I in general also disagree with the whole CA thing one has to admit that running a CA is not for free.
That setting up the auditing, buying a HSM, running the interfaces and so on.
And last but not least running the CRL&#x2F;OCSP infrastructure. From my point of view the main part you pay a good CA for is that they run the OCSP service. Though with OCSP stapling that burden is a bit relaxed.