[cpach]

Remember that there are lots of CAs, and quite many of them are based outside of the US. Those CAs currently do not offer ACME services for free, but there’s nothing stopping them from doing so.

I would say that the WebPKI system seems to be quite resilient, even in the face of strong geopolitical tension.