Install ca-certificates alongside apt-transport-https

branding/tasks/main.yml

@@ -88,7 +88,9 @@
 
 - name: ensure apt https transport is available
   apt:
-    name: apt-transport-https
+    name:
+      - apt-transport-https
+      - ca-certificates
     state: present
   loop: "{{ branding_apt_repos }}"
   when: