[ssl] add optional support for certifi

Certifi is a collection of root ca certificates, extracted from requests project.
It's much easier to use it, instead of bring your own certificate collection.
It should help this project with:
- handling ssl errors originated by outdated root ca collection
- supporting wider range of platforms out of the box (os x for example)

I actually wrote this after trying to run willie on OS X and failing :-)