The next evolutional step after adding with_pki=True to get_config_dict() is the a common verification function.
Ethernet EAPoL, OpenConnect, SSTP, HTTPS all of them use SSL certificates and had their custom verify() functions which can be simply abstracted away.