openssl s_client -showcerts -servername letsencrypt.org -connect letsencrypt.org:443 </dev/null
cat le_x3_11_2018.pem | openssl x509 -inform PEM -outform DER -out data/ca_le.der
ar q data/certs.ar data/ca_le.der