[pohuing]

Sophos does that in fact. I did a double take when I noticed my domains weren't signed by let's encrypt on my work machine.