diff --git a/Changelog.md b/Changelog.md
index 575d2fd..5a61fa3 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+## 0.9.11
+
+ * The `ca-certificates` package is now installed by default. This is because we include `apt-transport-https`, but Ubuntu 14.04 no longer installs `ca-certificates` by default anymore. Closes GH-73.
+
 ## 0.9.10 (release date: 2014-05-12)
 
  * Upgraded to Ubuntu 14.04 (Trusty). We will no longer release images based on 12.04.
diff --git a/image/prepare.sh b/image/prepare.sh
index 3b8c27a..b15c334 100755
--- a/image/prepare.sh
+++ b/image/prepare.sh
@@ -31,7 +31,7 @@ dpkg-divert --local --rename --add /usr/bin/ischroot
 ln -sf /bin/true /usr/bin/ischroot
 
 ## Install HTTPS support for APT.
-$minimal_apt_get_install apt-transport-https
+$minimal_apt_get_install apt-transport-https ca-certificates
 
 ## Upgrade all packages.
 apt-get dist-upgrade -y --no-install-recommends