diff --git a/branding/tasks/main.yml b/branding/tasks/main.yml
index a4763971c296e8f7a743ee491918597e355e821f..9b0e73b5d9cd325df986fcdf202e5667c1c59327 100644
--- a/branding/tasks/main.yml
+++ b/branding/tasks/main.yml
@@ -88,7 +88,9 @@
 
 - name: ensure apt https transport is available
   apt:
-    name: apt-transport-https
+    name:
+      - apt-transport-https
+      - ca-certificates
     state: present
   loop: "{{ branding_apt_repos }}"
   when: