There used to be StartSSL chain-o-trust back-in-days. Centralized, but working. Maybe one day someone creates decentralized one - and browser supporting it. Me breath is holding not :-/