You can override the REQUESTS_CA_BUNDLE env var to point to your own certs.
https://stackoverflow.com/a/37447847