autopkgtest failure: ca-certificates missing?

incoming.d.o forces https now.

Err:8 https://incoming.debian.org/debian-buildd buildd-unstable Release
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 130.89.148.77 443]

this makes all autopkgtests fail.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information