I think you want package updates from Ubuntu ESM, in particular ca-certificates 20190110~14.04.1~esm2.
I think you want package updates from Ubuntu ESM, in particular ca-certificates 20190110~ 14.04.1~ esm2.