Maybe people are protesting the wrong thing. The sale of .org is a symptom, the underlying cause is a bad regulatory framework for internet names.
There's no technical reason we can't have multiple systems for translating names into addresses. There's no longer any technical reason for having neatly organized dot separated addresses based on TLDs.
Allowing the translation of any text string into an address is entirely possible with present day computing power, and a truly distributed system similar to the global routing table would work to organize different providers announcing their own name domains.
Maintaining the old DNS TLD domains is stupid and subject to manipulation by corporations and corrupt politicians.
Like this sale.
The certificates are essentially a trusted authority saying cryptographically "we have verified this is really the person you think this name is" and that can be done for any identifier. Also, this system was set up before public key encryption became common, and there are plenty of other ways to accomplish the same function with PK crypto.