{ pkgs, ... }:
pkgs.stdenv.mkDerivation rec {
  pname = "sas-cacert";
  version = "0-unstable-2025-05-13";

  src = builtins.fetchurl {
    url = "http://certificates.sas.com/pki/sascacertsbundle.txt";
    sha256 = "sha256:0naqfhyh7ri1lxkyx8kdh4bmrd59j9gnfxfi12ggfqkii9n37lj6";
  };

  phases = [ "installPhase" ];

  installPhase = ''
    mkdir -p $out/etc/ssl/certs
    cp $src $out/etc/ssl/certs/ca-bundle.crt
  '';
}