Just updated the PR: instead of explicitly bundling the Let's Encrypt intermediate certificate, just install the general `ca-certificates` bundle using the MSYS2 sources. So we get more of the common root CAs and this might help more plugins in the future. The verification of geany.org's LE certificate still works fine.