The pip 26.2.2 wheel's vendored certificate bundle was byte-for-byte identical to certifi 2026.10.19 and produced the same rejection. We also verified the wheel against the SHA-256 digest in Python's ...