I ran into this the other day as well.

You can override the REQUESTS_CA_BUNDLE env var to point to your own certs.

https://stackoverflow.com/a/37447847