@nathanleiby I experimented a little with the verify option but don't think it verifies the entire CA chain.

Example: `api.twitter.com`, `api.stripe.com` or `api.facebook.com` will fail when verifying with our cert chain, but not `api.github.com`

```python
requests.get('https://api.github.com', verify='path-to-our-cert-bundle')
```
returns a 200