Use cacerts.pem from requests