Change ssl parameters in the ssl_args1 definition to
ssl_args1
ssl_args1 = { 'sslmode': 'verify-full', 'sslrootcert': f"{cert_path}/ca.crt", 'sslcert': f"{cert_path}/client.root.crt", 'sslkey': f"{cert_path}/client.root.key" }