diff --git a/home/.chezmoiscripts/universal/run_before_05-system.sh.tmpl b/home/.chezmoiscripts/universal/run_before_05-system.sh.tmpl
index a08e1566..808596a3 100644
--- a/home/.chezmoiscripts/universal/run_before_05-system.sh.tmpl
+++ b/home/.chezmoiscripts/universal/run_before_05-system.sh.tmpl
@@ -499,21 +499,6 @@ installSystemPips() {
     logg info 'Ensuring macOS system python3 has latest version of pip'
     /Library/Developer/CommandLineTools/usr/bin/python3 -m pip install --upgrade pip
   fi
-
-  ### Python
-  if command -v pip > /dev/null; then
-    if command -v python > /dev/null; then
-      if ! python -m certifi > /dev/null; then
-        pip install certifi
-      else
-        logg info 'certifi is available to python'
-      fi
-    else
-      logg warn 'python is not available on the system'
-    fi
-  else
-    logg warn 'pip is not available on the system'
-  fi
   
   ### Python 3
   if command -v pip3 > /dev/null; then
diff --git a/home/.chezmoitemplates/darwin/Brewfile b/home/.chezmoitemplates/darwin/Brewfile
index 5feeefa4..fa19c454 100644
--- a/home/.chezmoitemplates/darwin/Brewfile
+++ b/home/.chezmoitemplates/darwin/Brewfile
@@ -26,7 +26,6 @@ brew "jq"
 brew "moreutils"
 brew "node"
 brew "progress"
-brew "python@2"
 brew "python@3.11"
 brew "ruby"
 tap "go-task/tap"
diff --git a/home/dot_config/shell/exports.sh.tmpl b/home/dot_config/shell/exports.sh.tmpl
index 418c190d..76742e6a 100644
--- a/home/dot_config/shell/exports.sh.tmpl
+++ b/home/dot_config/shell/exports.sh.tmpl
@@ -414,7 +414,7 @@ if [ -f "$HOME/.local/etc/ssl/curl/cacert.pem" ]; then
   export SSL_CERT_FILE="$CERT_PATH"
   export REQUESTS_CA_BUNDLE="$CERT_PATH"
 elif command -v python3 > /dev/null; then
-  export CERT_PATH="$(python3 -m certifi)" || export CERT_PATH="$(python -m certifi)"
+  export CERT_PATH="$(python3 -m certifi)" || export CERT_PATH="$(python -m certifi)" || export CERT_PATH="$HOME/.local/etc/ssl/curl/cacert.pem"
   export SSL_CERT_FILE="$CERT_PATH"
   export REQUESTS_CA_BUNDLE="$CERT_PATH"
 fi