I do not want to support a non-commercial and community driven CA cert authority[sic] that does not meet commonly accepted CA audit requirements. My favorite

I do not want to support a non-commercial and community driven CA cert authority[sic] that does not meet commonly accepted CA audit requirements. My favorite open source project's login page can use self signed cert. I can download the ssl.key.asc or project.crt.asc that the project publishes on the web page or git repository and verify the signatures using the same gpg key I use to verify the project tarballs.