For PXE boot we need to download rootfs from external servers on the initramfs boot stage, and busybox wget cannot connect some servers, because default SSL settings are not compatible with them.
To fix the problem we need to include /etc/ssl/openssl.cnf to initramfs.