You will get this mistake when your neighborhood CA shop can not be observed either because of authorization difficulties or because the file is outright lacking. To determine which CA file python is using, operate the following command: When you've got proxy extra on your ec2 equipment and it is in private subnet using a S3 vpc-endpoint connect