1. There are too many CAs<p>2. so let&#x27;s create another CA!<p>The transition here was weird.<p>Also, there are now a HUGE number of certs signed by let&#x27;s encrypt. Isn&#x27;t that a problem? Remember Comodo now too big to get removed?<p>I guess let&#x27;s encrypt cannot sign intermediate CA certificates and that&#x27;s a good thing, and we should have more CA like that and less CA like Comodo. Also if they are free (I still find it mindblowing that you have to pay for certificates) and are quick to implement&#x2F;respect new rules directed by the cabforum. Then it is an improvement of the current internet PKI.<p>Now what about better&#x2F;other solutions to secure internet? I&#x27;m still scared of having to trust thousands of CAs that all have the same power.