yup its lets encrypt. they publish the new certs to a list anyone can pull