So, i took a crack at doing this today. Unfortunately for me, that one .pem file in NUSpli has since been deleted.
Thank goodness for old inactive forks! Got the cert from https://github.com/Xpl0itU/NUSspli/blob/master/data/ca-certificates/ISRG_Root_X1.pem Turns out it's exact same one...
