diff --git a/tasks/trusted_ca.yml b/tasks/trusted_ca.yml
index eec71aa..fa0f034 100644
--- a/tasks/trusted_ca.yml
+++ b/tasks/trusted_ca.yml
@@ -47,8 +47,11 @@
 
 - name: Manage optional CA files on deb
   block:
-  - name: Ensure that ca-certificates is installed
-    apt: pkg=ca-certificates state=present cache_valid_time=1800
+  - name: Ensure that ca-certificates is installed and up to date
+    apt:
+      pkg: ca-certificates
+      state: latest
+      cache_valid_time: 1800
 
   - name: Get the CA files that we want to trust on deb
     get_url: url={{ item.ca_url }} dest={{ trusted_ca_deb_path }}/{{ item.ca }} owner=root group=root mode='0444'