I have yet to find a CA that doesn't require personal information for DV certificates. Is this because all of the major browsers and operating systems have a policy to reject CAs that don't require personal information? Or is there some other reason for the lack of privacy-friendly CAs?
I'd like to replace my personal web server's self-signed SSL certificate with a certificate signed by a well-trusted certificate authority. I understand that some use cases require thorough identity investigations, but I only need a basic domain validation (DV) certificate. I don't want to share personal details that are irrelevant to providing end-to-end encryption for personal use (e.g., my home address and phone number).
I'm not looking for a CA that blindly trusts a claim of ownership of a domain—I want them to have robust domain validation practices. I'm just looking for a CA that doesn't require information beyond proof of ownership of the domain.
Why should they care about my name or where I live as long as I can prove that I own the domain?
Do they want this information so that they can sue me if I do something "bad" with the cert they issue? Does the government force them to collect this information for law enforcement or foreign intelligence purposes?