Comment by otabdeveloper4

You don't need a "root certificate".

Just publish a public key in your DNS TXT records. ACME is just that anyways but with extra (pointless) steps.

The whole SSL certificate grift is just a way to extort money out of nothing.