crt.sh actually has their postgres database open to the public!

You can connect with:

  psql -h crt.sh -p 5432 -U guest certwatch

From what you're saying, the query would be:

  SELECT c.ID
  FROM certificate c
  WHERE (c.ISSUER_CA_ID = 16418 OR c.ISSUER_CA_ID = 7395) AND NOT x509_hasExtension(c.CERTIFICATE, '1.3.6.1.4.1.11129.2.4.3')
  OFFSET 1000000000 LIMIT 1;

Unfortunately (but expectedly) it times out