How to add a custom CA Root certificate to the CA Store used by pip in Windows?

pip install fails with "connection error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:598)"