someone please fork letsencrypt to provide this cert.