At the end of https://discourse.jupyter.org/t/setup-oauth2-locally-tornado-curl-httpclient-curlerror-http-599-server-certificate-verification-failed-cafile-none-crlfile-none/ I shared my working config.