And that’s the problem. I know I’m talking to “someone who has convinced Let’s Encrypt, US that they are foobar.com”. I have no idea if I’m actually talking to

And that’s the problem. I know I’m talking to “someone who has convinced Let’s Encrypt, US that they are foobar.com”. I have no idea if I’m actually talking to Foobar, Inc. (incorporated in Delaware, US). There is a standard, reliable register of business entities (typically called “Secretary of State”) and it should be trivial to know if the domain I’m talking to is owned by/part of that entity, that the X.509 matches, and so forth.