use the ca list that ships with requests. update test.