yeah I personally love CACert too. okay the thing for SSSL didnt really know, maybe just forgotten since I do this mainly for personal stuff…
WoSign has the problem that since their CRL and/or OCSP seems to be bad you often cant get to their site (EV cert)