Would you accept a PR which adds the following:
Excon.defaults[:ssl_ca_file] = NetHttpSslFix::LOCAL_CA_FILE if defined?(Excon)
(Possibly consider renaming this lib to ruby_ssl_fix)
Ruby has a bazillion HTTP interaction libraries--Faraday, Excon, HTTPClient, etc. (since the std lib Net::HTTP API is not so good many people have decided to reinvent the wheel) and they all fall victim to a similar problem.