diff --git a/manifest.dhall b/manifest.dhall
index 1acd40dda9712a75e1d6cbf76fd1e35e4afc9f0e..0255c96bd91f89cf3d60a1a3b205cd4f9ec0fffc 100644
--- a/manifest.dhall
+++ b/manifest.dhall
@@ -551,5 +551,6 @@ in  [ callHackage "Cabal" "3.8.1.0"
     , callHackage "warp-tls" "3.3.3"
     , callHackage "witherable" "0.4.2"
     , callHackage "with-utf8" "1.0.2.3"
+    , callHackage "x509" "1.7.7"
     , callHackage "xml-conduit" "1.9.1.1"
     ]
diff --git a/overlay.nix b/overlay.nix
index 51b44f07104b36ff5d1e86abed0e468995755ff7..f3a15583fc57073bb5421eace9a4f7390d9771fb 100644
--- a/overlay.nix
+++ b/overlay.nix
@@ -711,6 +711,8 @@ final: prev: with pkgs.haskell.lib; {
 
   witherable = prev.callPackage (./pkgs/witherable.nix) { };
 
+  x509 = prev.callPackage (./pkgs/x509.nix) { };
+
   xml-conduit = prev.callPackage (./pkgs/xml-conduit.nix) { };
 
 }
diff --git a/pkgs/x509.nix b/pkgs/x509.nix
new file mode 100644
index 0000000000000000000000000000000000000000..3e973e53cec723a85eb3ccad09e5718e139a4ed0
--- /dev/null
+++ b/pkgs/x509.nix
@@ -0,0 +1,59 @@
+{ mkDerivation
+, asn1-encoding
+, asn1-parse
+, asn1-types
+, base
+, bytestring
+, containers
+, cryptonite
+, hourglass
+, lib
+, memory
+, mtl
+, pem
+, tasty
+, tasty-quickcheck
+, transformers
+}:
+mkDerivation {
+  pname = "x509";
+  version = "1.7.7";
+  sha256 = "59c6920fe5d53f1e6a15176bd853f1a18422be87cd8496772ff4571828a568fe";
+  isLibrary = true;
+  isExecutable = false;
+  enableSeparateDataOutput = false;
+  libraryHaskellDepends = [
+    asn1-encoding
+    asn1-parse
+    asn1-types
+    base
+    bytestring
+    containers
+    cryptonite
+    hourglass
+    memory
+    pem
+    transformers
+  ];
+  testHaskellDepends = [
+    asn1-types
+    base
+    bytestring
+    cryptonite
+    hourglass
+    mtl
+    tasty
+    tasty-quickcheck
+  ];
+  enableLibraryProfiling = false;
+  enableExecutableProfiling = false;
+  doHaddock = false;
+  jailbreak = true;
+  doCheck = false;
+  doBenchmark = false;
+  hyperlinkSource = false;
+  homepage = "http://github.com/vincenthz/hs-certificate";
+  description = "X509 reader and writer";
+  license = lib.licenses.bsd3;
+  broken = false;
+}