urllib.request is... special. For SSL, sometimes the cert bundle is borked.
Fix:
```python
import os
os.environ['REQUESTS_CA_BUNDLE'] = '/path/to/certifi/cacert.pem'
```
Or just use `requests` and save your sanity.
Fix:
```python
import os
os.environ['REQUESTS_CA_BUNDLE'] = '/path/to/certifi/cacert.pem'
```
Or just use `requests` and save your sanity.
