Explicitly use certifi bundle in template verifier

scripts/template_verifier.py

@@ -35,6 +35,7 @@
 
 import sys
 import os.path
+import certifi
 
 # Look for indra/lib/python in all possible parent directories ...
 # This is an improvement over the setup-path.py method used previously:
@@ -141,7 +142,7 @@ def fetch(url):
         with open(file_name, 'rb') as f:
             return f.read()
     else:
-        with urllib.request.urlopen(url) as res:
+        with urllib.request.urlopen(url, cafile=certifi.where()) as res:
             body = res.read()
             if res.status > 299:
                 sys.exit("ERROR: Unable to download %s. HTTP status %d.\n%s" % (url, res.status, body.decode("utf-8")))