diff -Nru debian-installer-20101020ubuntu543.3/build/pkg-lists/base debian-installer-20101020ubuntu543.4/build/pkg-lists/base
--- debian-installer-20101020ubuntu543.3/build/pkg-lists/base	2018-10-19 11:40:18.000000000 -0400
+++ debian-installer-20101020ubuntu543.4/build/pkg-lists/base	2018-11-26 13:49:46.000000000 -0500
@@ -21,6 +21,7 @@
 pciutils-udeb
 oem-config-check
 wget-udeb
+ca-certificates-udeb
 
 #include "udev"
 
diff -Nru debian-installer-20101020ubuntu543.3/debian/changelog debian-installer-20101020ubuntu543.4/debian/changelog
--- debian-installer-20101020ubuntu543.3/debian/changelog	2018-10-19 11:40:18.000000000 -0400
+++ debian-installer-20101020ubuntu543.4/debian/changelog	2018-11-26 13:49:46.000000000 -0500
@@ -1,3 +1,11 @@
+debian-installer (20101020ubuntu543.4) bionic; urgency=medium
+
+  * build/pkg-lists/base: add ca-certificates-udeb to enable HTTPS
+    without d-i/allow_unauthenticated_ssl in stock initramfs image
+    as in Debian. (LP: #1807023)
+
+ -- Mauricio Faria de Oliveira <mfo@canonical.com>  Mon, 26 Nov 2018 16:49:46 -0200
+
 debian-installer (20101020ubuntu543.3) bionic; urgency=medium
 
   * Move master kernels to 4.15.0-38 to fix an issue with NVMe naming