diff --git a/pr-28.patch b/pr-28.patch
index f679274..db36551 100644
--- a/pr-28.patch
+++ b/pr-28.patch
@@ -1,5 +1,5 @@
 diff --git a/base.nix b/base.nix
-index 7eaee32..f767d5e 100644
+index 7eaee32..c0a88c0 100644
 --- a/base.nix
 +++ b/base.nix
 @@ -27,6 +27,11 @@ with lib;
@@ -14,6 +14,15 @@ index 7eaee32..f767d5e 100644
      not-os.simpleStaticIp = mkOption {
        type = types.bool;
        default = false;
+@@ -93,6 +98,8 @@ with lib;
+         build-cores = 4
+         EOF
+       '';
++      "ssl/certs/ca-certificates.crt".source = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
++      "ssl/certs/ca-bundle.crt".source = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
+       bashrc.text = "export PATH=/run/current-system/sw/bin";
+       profile.text = "export PATH=/run/current-system/sw/bin";
+       "resolv.conf".text = "nameserver 10.0.2.3";
 diff --git a/stage-1.nix b/stage-1.nix
 index 331fecd..85fda30 100644
 --- a/stage-1.nix