use resource_filename over resource_string 

due to errors with it being inside .egg and unusable by outside methods that need access to the data.  Per the PEP 302 really the data should be accessed by pkgutils.get_data() but that does not work in this case because of how the cacert.pem is being used.