Dear Maintainer, the manual page for apt-transport-https contains incorrect information on how to apply options only to specific hosts. According to the manual page, the following should work: Acquire::https::CAInfo::example.com "/my-root-cert.pem"; This seems to have no effect. APT will reject any repositories serving certificates signed by the specified CA. This syntax however works fine: Acquire::https::example.com::CAInfo "/my-root-cert.pem";