I can agree that CA are a point of centralization. A web of trust in my opinion is better such as used in PGP.

However, the whole dns system is centralized. Any alertanative dns root is kinda ignored as well. Its kinda sad.

Also there only a handful of browsers. Even less browser engines. This is also sad, and partly to blame is how complicated the standards are these days.