buildfetch for RHCOS pipeline builds dir gives SSL complaints

[dustymabe]

in the RHCOS pipeline if I start a debug pod and then try to cosa buildfetch --url <RHCOS builds browser URL> I get SSL errors:

ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1000)

I thought that pipeutils.addOptionalRootCA() would have taken care of this but apparently not?