diff --git a/Dockerfile.template b/Dockerfile.template
index 044bfc3d..08800745 100644
--- a/Dockerfile.template
+++ b/Dockerfile.template
@@ -239,14 +239,14 @@ RUN apk add --no-cache nss
 {{/alpine}}
 {{#debian}}
 FROM debian:buster-slim
+RUN apt-get update && apt-get install -y ca-certificates
 {{#firefox}}
 # curl tries to load the CA certificates for libnss.
 # It loads them from /usr/lib/libnssckbi.so and /usr/lib/libnsspem.so,
 # which are supplied by 'libnss3' and 'nss-plugin-pem' on debian.
-RUN apt-get update && apt-get install -y libnss3 nss-plugin-pem
+RUN apt-get install -y libnss3 nss-plugin-pem
 {{/firefox}}
 {{/debian}}
-
 # Copy curl-impersonate from the builder image
 COPY --from=builder /build/install /usr/local
 {{#debian}}
diff --git a/chrome/Dockerfile b/chrome/Dockerfile
index 7a40abe6..e2c1b1f7 100644
--- a/chrome/Dockerfile
+++ b/chrome/Dockerfile
@@ -138,7 +138,7 @@ RUN chmod +x out/curl_*
 # Create a final, minimal image with the compiled binaries
 # only.
 FROM debian:buster-slim
-
+RUN apt-get update && apt-get install -y ca-certificates
 # Copy curl-impersonate from the builder image
 COPY --from=builder /build/install /usr/local
 # Update the loader's cache
diff --git a/chrome/Dockerfile.alpine b/chrome/Dockerfile.alpine
index 9188d284..b5004f2b 100644
--- a/chrome/Dockerfile.alpine
+++ b/chrome/Dockerfile.alpine
@@ -137,7 +137,6 @@ RUN chmod +x out/curl_*
 # Create a final, minimal image with the compiled binaries
 # only.
 FROM alpine:3.15.0
-
 # Copy curl-impersonate from the builder image
 COPY --from=builder /build/install /usr/local
 # Wrapper scripts
diff --git a/firefox/Dockerfile b/firefox/Dockerfile
index ffa450db..f34bc0b9 100644
--- a/firefox/Dockerfile
+++ b/firefox/Dockerfile
@@ -134,11 +134,11 @@ RUN chmod +x out/curl_*
 # Create a final, minimal image with the compiled binaries
 # only.
 FROM debian:buster-slim
+RUN apt-get update && apt-get install -y ca-certificates
 # curl tries to load the CA certificates for libnss.
 # It loads them from /usr/lib/libnssckbi.so and /usr/lib/libnsspem.so,
 # which are supplied by 'libnss3' and 'nss-plugin-pem' on debian.
-RUN apt-get update && apt-get install -y libnss3 nss-plugin-pem
-
+RUN apt-get install -y libnss3 nss-plugin-pem
 # Copy curl-impersonate from the builder image
 COPY --from=builder /build/install /usr/local
 # Update the loader's cache
diff --git a/firefox/Dockerfile.alpine b/firefox/Dockerfile.alpine
index c1d00ac1..afb5d581 100644
--- a/firefox/Dockerfile.alpine
+++ b/firefox/Dockerfile.alpine
@@ -133,7 +133,6 @@ FROM alpine:3.15.0
 # It loads them from /usr/lib/libnssckbi.so,
 # which is supplied by 'nss' on alpine.
 RUN apk add --no-cache nss
-
 # Copy curl-impersonate from the builder image
 COPY --from=builder /build/install /usr/local
 # Wrapper scripts