Add option to replace default OpenSSL certificates with those from certifi Python package

[baagaard-usgs]

When building macOS binaries, we run into the problem that the default OpenSSL certificates may not include all of those in the Python certifi package. A good way to fix this is to replace the default OpenSSL certificates with those from the Python certifi package. This is what is done for the macOS binary from Python.org.

import ssl
import certifi

openssl_cafile = ssl.get_default_verify_paths().openssl_cafile
certifi_cafile = certifi.where()

# Copy `certifi_cafile` to `openssl_cafile`