On a foreign distro, awscli does not use the global certificate store. It seems to only use certifi.pem from the python-certifi package. There seems to be no way to override the certificate store.
This makes awscli unusable on foreign distros. -- Ricardo