{ pkgs, ... }:
pkgs.stdenv.mkDerivation rec {
  pname = "sas-cacert";
  version = "0-unstable-2025-05-13";

  src = builtins.fetchurl {
    url = "http://certificates.sas.com/pki/sascacertsbundle.txt";
    sha256 = "sha256:1lah292kqhw6mkj63870qh8fjm44ll4jdqz87pfgr4sb803w1i15";
  };

  phases = [ "installPhase" ];

  installPhase = ''
    mkdir -p $out/etc/ssl/certs
    cp $src $out/etc/ssl/certs/ca-bundle.crt
  '';
}