We have DANE, but that's reliant on DNSSEC (which is suboptimal and basically unused outside of a few TLDs).

We also used to have HPKP but that was killed because anyone who could take over a site temporarily could pin their own key to all new visitors and then hold the website ransom even after the owner got a hold of their domain again.

Honestly, if we just patch up DNSSEC to work around its current limitations, we could already use DANE and be done with it. Put the (ECC) public key in the HTTPS record your client is looking up anyway and you're basically there.