CentOS6 cannot download from https://www.kernel.org in GIT_Source role

[sxa]

Seen in VPC and PR checks. Last successful VPC run on that distribution was on October 28th.

19:19:17 TASK [GIT_Source : Download git source] ****************************************
19:19:17 FAILED - RETRYING: Download git source (3 retries left).
19:19:17 FAILED - RETRYING: Download git source (2 retries left).
19:19:17 FAILED - RETRYING: Download git source (1 retries left).

19:19:17 fatal: [localhost]: FAILED! => {"attempts": 3, "changed": false, "msg": "Failed to validate the SSL certificate for www.kernel.org:443. Make sure your managed systems have a valid CA certificate installed. If the website serving the url uses SNI you need python >= 2.7.9 on your managed machine (the python executable used (/usr/bin/python) is version: 2.6.6 (r266:84292, Jun 20 2019, 14:14:55) [GCC 4.4.7 20120313 (Red Hat 4.4.7-23)]) or you can install the urllib3, pyOpenSSL, ndg-httpsclient, and pyasn1 python modules to perform SNI verification in python >= 2.6. You can use validate_certs=False if you do not need to confirm the servers identity but this is unsafe and not recommended. Paths checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem, /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org, /etc/ansible. The exception msg was: hostname 'www.kernel.org' doesn't match 'm.sni-311-default.ssl.fastly.net'."}