Python certificate handling is a hot mess, even by Python standards.