It's good to be wary. You can trust the ACME CAs listed on this site: https://www.acmeisuptime.com/ https://www.acmeisuptime.com/ (Although, I think that list

It's good to be wary. You can trust the ACME CAs listed on this site: https://www.acmeisuptime.com/ https://www.acmeisuptime.com/ (Although, I think that list could use some updating. I'll ping the author.) Personally I would use Let's Encrypt, ZeroSSL (Sectigo) and Google Trust Services. There are, of course, others. But which ones you choose depend on your requirements and such. (Some offer business support, for example.) SSL.com and Sectigo also offer ACME but I am not sure how performant their CA software is.