diff -Nru debian-installer-20101020ubuntu451.26/build/pkg-lists/base debian-installer-20101020ubuntu451.27/build/pkg-lists/base
--- debian-installer-20101020ubuntu451.26/build/pkg-lists/base	2018-07-30 17:25:37.000000000 -0300
+++ debian-installer-20101020ubuntu451.27/build/pkg-lists/base	2018-12-06 18:12:58.000000000 -0200
@@ -21,6 +21,7 @@
 pciutils-udeb
 oem-config-check
 wget-udeb
+ca-certificates-udeb
 
 #include "udev"
 
diff -Nru debian-installer-20101020ubuntu451.26/debian/changelog debian-installer-20101020ubuntu451.27/debian/changelog
--- debian-installer-20101020ubuntu451.26/debian/changelog	2018-07-30 17:26:39.000000000 -0300
+++ debian-installer-20101020ubuntu451.27/debian/changelog	2018-12-06 18:12:58.000000000 -0200
@@ -1,3 +1,11 @@
+debian-installer (20101020ubuntu451.27) xenial; urgency=medium
+
+  * build/pkg-lists/base: add ca-certificates-udeb to enable HTTPS
+    without d-i/allow_unauthenticated_ssl in stock initramfs image
+    as in Debian. (LP: #1807023)
+
+ -- Mauricio Faria de Oliveira <mfo@canonical.com>  Mon, 26 Nov 2018 16:49:46 -0200
+
 debian-installer (20101020ubuntu451.26) xenial; urgency=medium
 
   * Rebuild against new systemd for the 4.4 kernel regression fix (LP: #1784454)