openssl s_client -showcerts -servername letsencrypt.org -connect letsencrypt.org:443 </dev/null cat le_x3_11_2018.pem | openssl x509 -inform PEM -outform DER -out data/ca_le.der ar q data/certs.ar data/ca_le.der