Get rid of python to generate the certificates. xbps-0.48 will depend on ca-certificates because has gained support to verify the https certs.