* add let's encrypt certificate missing on some older android devices * create Certificate with Lazy::new() * document certificate source * use smaller *.der format instead of *.pem
