> If anyone can get a certificate for the domains I own, it can't stop man in the middle attacks.

You're right, if that were the case, it would be terrible!

Luckily, it's not: to get a certificate for your domain, I need to either control your domain, or control the computer that the domain points at. In either case, you have much bigger problems than certificate issuance.