fontbakery: [FontBakeryCondition:api_gfonts_ttFont]: urlopen error [SSL: CERTIFICATE_VERIFY_FAILED]

original title of this issue was: Checks 117–119, 154: Unable to get info from hosted fonts

Observed behaviour

When running fontbakery on Cabin and Expletus Sans, I end up with 4 errors all with an SSL certificate issue and the same traceback:

>> com.google.fonts/check/154 with (('font[0]', 'Cabin-Regular.ttf'),)
   Check font has same encoded glyphs as version hosted on fonts.google.com
 * ERROR: The condition <FontBakeryCondition:api_gfonts_ttFont> had an error: FailedConditionError: The condition <FontBakeryCondition:remote_styles> had an error: URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificateverify failed (_ssl.c:841)>
           File "/Users/lags/Desktop/fontbakery-venv/lib/python3.6/site-packages/fontbakery/checkrunner.py", line 370, in _evaluate_condition
             args = self._get_args(condition, iterargs, path)
           File "/Users/lags/Desktop/fontbakery-venv/lib/python3.6/site-packages/fontbakery/checkrunner.py", line 509, in _get_args
             args[name] = self._get(name, iterargs, path)
           File "/Users/lags/Desktop/fontbakery-venv/lib/python3.6/site-packages/fontbakery/checkrunner.py", line 483, in _get
             raise error


   Result: ERROR

This happens when running fontbakery on a font file when there is also a METADATA.pb file in the same directory, but if I remove the METADATA.pb file, then I only get an error for check 117.

It is very possible I may be doing something wrong on my end, though I am not sure what that would be; my setup is very straightforward: I am running fontbakery v0.6.5 from a virtual environment.

Expected behaviour

I would expect METADATA.pb to not affect checks that don’t relate to it

Resources and exact process needed to replicate

The exact location I was running fontbakery on can be found here