Suggest removing the https requirement.
With the purpose of the CustomSource parameter being to allow the installation from a web server inside an environment that does not have appropriate access to the default installation URL.
Internal web servers can often use http rather than https. This would allow those internal web servers to host a downloaded plugin for installation.