Apparently the requests library by default doesn't like certificates with a subjectAltName