via @jedisct1
via https://utcc.utoronto.ca/~cks/space/blog/web/LetsEncryptNoCAThreatForNow
via @jpmens