The problem is that python can have trouble finding the default certifcate set on macOS. The actual bundle is installed by the certifi package which the requests module uses under the hood. Fixes: #588
See https://github.com/emscripten-core/emscripten/issues/7198
In both cases updating these is slightly non-trivial so encode the process in the script.