Use ensure_packages to install ca-certificates

This way we can add multiple of them