Originally reported by: arfrever (Bitbucket: arfrever, GitHub: arfrever)
Setuptools[ssl:sys_platform=='win32'] currently depends on wincertstore 0.1.
wincertstore 0.2 is available and contains a security fix.
Dependency in Setuptools probably should be updated.