Workaround as urllib3 cannot resolve an incomplete intermediate certificate chain - such as incomplete-chain.badssl.com. Doesn't seem to be a way in python to implement AIA Fetching either, so manually appending the Compass certificates.