All buildGoModule fail on SSL verification

I’m using nix on aarch64-darwin and I cannot seem to build any go package.

Example:
pkgs/notifiarr/default.nix:

{ pkgs, lib }:
pkgs.buildGoModule {
  name = "notifiarr";
  src = pkgs.fetchFromGitHub {
    owner = "Notifiarr";
    repo = "notifiarr";
    rev = "v0.7.0";
    sha256 = "sha256-eHzIr/oJMNKnaX8odE2zhBFIG8oyxSurHCc3I0lp53w";
  };
  vendorHash = lib.fakeHash;
}
❯ nix-build --show-trace -E 'let pkgs=import <nixpkgs> {}; in (pkgs.callPackage ./pkgs/notifiarr {})'
these 2 derivations will be built:
  /nix/store/jm0cw90hf0xkkfgqxqphzrbc8syi5095-notifiarr-go-modules.drv
  /nix/store/fj7b61sx5aw2ixfzlk3zslbm1gdhzw8f-notifiarr.drv
building '/nix/store/jm0cw90hf0xkkfgqxqphzrbc8syi5095-notifiarr-go-modules.drv'...
unpacking sources
unpacking source archive /nix/store/qs2231wqd4psvqyw0jdc9c5h7gvd6lx7-source
source root is source
patching sources
updateAutotoolsGnuConfigScriptsPhase
configuring
building
go: downloading github.com/stretchr/testify v1.8.4
go: downloading github.com/akavel/rsrc v0.10.2
go: downloading github.com/kevinburke/go-bindata/v4 v4.0.2
go: downloading github.com/swaggo/swag v1.16.2
go: downloading github.com/gorilla/mux v1.8.0
go: downloading golift.io/starr v1.0.1-0.20231103013021-4a3f9d0d4fb4
go: downloading github.com/hekmon/transmissionrpc/v3 v3.0.0
go: downloading github.com/mrobinsn/go-rtorrent v1.8.0
go: downloading golang.org/x/time v0.4.0
go: downloading golift.io/cnfg v0.2.2
go: downloading golift.io/datacounter v1.0.4
go: downloading golift.io/deluge v0.10.1
go: downloading golift.io/nzbget v0.1.5
go: downloading golift.io/qbit v0.0.0-20230904231408-277087540366
go: downloading golift.io/version v0.0.2
go: downloading github.com/mitchellh/go-homedir v1.1.0
go: downloading golift.io/rotatorr v0.0.0-20230911015553-cd2abbd726c7
go: downloading github.com/BurntSushi/toml v1.3.2
go: downloading github.com/dsnet/compress v0.0.1
go: downloading github.com/shirou/gopsutil/v3 v3.23.10
go: downloading github.com/spf13/pflag v1.0.6-0.20210604193023-d5e0c0615ace
go: downloading golang.org/x/crypto v0.14.0
go: downloading golang.org/x/text v0.14.0
go: downloading golift.io/cnfgfile v0.0.0-20230531075023-f880041cc0a0
go: downloading github.com/go-ping/ping v1.1.0
go: downloading github.com/hako/durafmt v0.0.0-20210608085754-5c1018a4e16b
go: downloading golift.io/xtractr v0.2.2
go: downloading modernc.org/sqlite v1.27.0
go: downloading golift.io/cache v0.0.2
go: downloading github.com/hugelgupf/go-shlex v0.0.0-20200702092117-c80c9d0918fa
go: downloading github.com/nxadm/tail v1.4.11
go: downloading github.com/energye/systray v1.0.2
go: downloading github.com/fsnotify/fsnotify v1.7.0
go: downloading github.com/gorilla/schema v1.2.0
go: downloading github.com/gorilla/securecookie v1.1.1
go: downloading github.com/gorilla/websocket v1.5.0
go: downloading github.com/jackpal/gateway v1.0.10
go: downloading github.com/kardianos/osext v0.0.0-20190222173326-2bc1f35cddc0
go: downloading github.com/lestrrat-go/apache-logformat/v2 v2.0.6
go: downloading golift.io/mulery v0.0.4
go: downloading github.com/go-sql-driver/mysql v1.7.1
go: downloading github.com/jaypipes/ghw v0.12.0
go: downloading golang.org/x/sys v0.14.0
go: downloading github.com/gen2brain/beeep v0.0.0-20230907135156-1a38885a97fc
go: downloading github.com/gen2brain/dlgs v0.0.0-20220603100644-40c77870fa8d
go: downloading github.com/gonutz/w32/v2 v2.10.0
go: downloading golang.org/x/mod v0.14.0
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        github.com/gorilla/mux: github.com/gorilla/mux@v1.8.0: Get "https://proxy.golang.org/github.com/gorilla/mux/@v/v1.8.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        github.com/hekmon/transmissionrpc/v3: github.com/hekmon/transmissionrpc/v3@v3.0.0: Get "https://proxy.golang.org/github.com/hekmon/transmissionrpc/v3/@v/v3.0.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        github.com/mrobinsn/go-rtorrent/xmlrpc: github.com/mrobinsn/go-rtorrent@v1.8.0: Get "https://proxy.golang.org/github.com/mrobinsn/go-rtorrent/@v/v1.8.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golang.org/x/time/rate: golang.org/x/time@v0.4.0: Get "https://proxy.golang.org/golang.org/x/time/@v/v0.4.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/cnfg: golift.io/cnfg@v0.2.2: Get "https://proxy.golang.org/golift.io/cnfg/@v/v0.2.2.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/datacounter: golift.io/datacounter@v1.0.4: Get "https://proxy.golang.org/golift.io/datacounter/@v/v1.0.4.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/deluge: golift.io/deluge@v0.10.1: Get "https://proxy.golang.org/golift.io/deluge/@v/v0.10.1.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/nzbget: golift.io/nzbget@v0.1.5: Get "https://proxy.golang.org/golift.io/nzbget/@v/v0.1.5.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/qbit: golift.io/qbit@v0.0.0-20230904231408-277087540366: Get "https://proxy.golang.org/golift.io/qbit/@v/v0.0.0-20230904231408-277087540366.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/starr: golift.io/starr@v1.0.1-0.20231103013021-4a3f9d0d4fb4: Get "https://proxy.golang.org/golift.io/starr/@v/v1.0.1-0.20231103013021-4a3f9d0d4fb4.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/starr/debuglog: golift.io/starr@v1.0.1-0.20231103013021-4a3f9d0d4fb4: Get "https://proxy.golang.org/golift.io/starr/@v/v1.0.1-0.20231103013021-4a3f9d0d4fb4.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/starr/lidarr: golift.io/starr@v1.0.1-0.20231103013021-4a3f9d0d4fb4: Get "https://proxy.golang.org/golift.io/starr/@v/v1.0.1-0.20231103013021-4a3f9d0d4fb4.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/starr/prowlarr: golift.io/starr@v1.0.1-0.20231103013021-4a3f9d0d4fb4: Get "https://proxy.golang.org/golift.io/starr/@v/v1.0.1-0.20231103013021-4a3f9d0d4fb4.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/starr/radarr: golift.io/starr@v1.0.1-0.20231103013021-4a3f9d0d4fb4: Get "https://proxy.golang.org/golift.io/starr/@v/v1.0.1-0.20231103013021-4a3f9d0d4fb4.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/starr/readarr: golift.io/starr@v1.0.1-0.20231103013021-4a3f9d0d4fb4: Get "https://proxy.golang.org/golift.io/starr/@v/v1.0.1-0.20231103013021-4a3f9d0d4fb4.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/starr/sonarr: golift.io/starr@v1.0.1-0.20231103013021-4a3f9d0d4fb4: Get "https://proxy.golang.org/golift.io/starr/@v/v1.0.1-0.20231103013021-4a3f9d0d4fb4.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/apps imports
        golift.io/version: golift.io/version@v0.0.2: Get "https://proxy.golang.org/golift.io/version/@v/v0.0.2.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/bindata imports
        github.com/akavel/rsrc: github.com/akavel/rsrc@v0.10.2: Get "https://proxy.golang.org/github.com/akavel/rsrc/@v/v0.10.2.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/bindata imports
        github.com/kevinburke/go-bindata/v4: github.com/kevinburke/go-bindata/v4@v4.0.2: Get "https://proxy.golang.org/github.com/kevinburke/go-bindata/v4/@v/v4.0.2.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/bindata imports
        github.com/swaggo/swag: github.com/swaggo/swag@v1.16.2: Get "https://proxy.golang.org/github.com/swaggo/swag/@v/v1.16.2.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/energye/systray: github.com/energye/systray@v1.0.2: Get "https://proxy.golang.org/github.com/energye/systray/@v/v1.0.2.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/fsnotify/fsnotify: github.com/fsnotify/fsnotify@v1.7.0: Get "https://proxy.golang.org/github.com/fsnotify/fsnotify/@v/v1.7.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/gorilla/schema: github.com/gorilla/schema@v1.2.0: Get "https://proxy.golang.org/github.com/gorilla/schema/@v/v1.2.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/gorilla/securecookie: github.com/gorilla/securecookie@v1.1.1: Get "https://proxy.golang.org/github.com/gorilla/securecookie/@v/v1.1.1.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/gorilla/websocket: github.com/gorilla/websocket@v1.5.0: Get "https://proxy.golang.org/github.com/gorilla/websocket/@v/v1.5.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/hako/durafmt: github.com/hako/durafmt@v0.0.0-20210608085754-5c1018a4e16b: Get "https://proxy.golang.org/github.com/hako/durafmt/@v/v0.0.0-20210608085754-5c1018a4e16b.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/jackpal/gateway: github.com/jackpal/gateway@v1.0.10: Get "https://proxy.golang.org/github.com/jackpal/gateway/@v/v1.0.10.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/kardianos/osext: github.com/kardianos/osext@v0.0.0-20190222173326-2bc1f35cddc0: Get "https://proxy.golang.org/github.com/kardianos/osext/@v/v0.0.0-20190222173326-2bc1f35cddc0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/lestrrat-go/apache-logformat/v2: github.com/lestrrat-go/apache-logformat/v2@v2.0.6: Get "https://proxy.golang.org/github.com/lestrrat-go/apache-logformat/v2/@v/v2.0.6.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/mitchellh/go-homedir: github.com/mitchellh/go-homedir@v1.1.0: Get "https://proxy.golang.org/github.com/mitchellh/go-homedir/@v/v1.1.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/nxadm/tail: github.com/nxadm/tail@v1.4.11: Get "https://proxy.golang.org/github.com/nxadm/tail/@v/v1.4.11.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/shirou/gopsutil/v3/disk: github.com/shirou/gopsutil/v3@v3.23.10: Get "https://proxy.golang.org/github.com/shirou/gopsutil/v3/@v/v3.23.10.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/shirou/gopsutil/v3/host: github.com/shirou/gopsutil/v3@v3.23.10: Get "https://proxy.golang.org/github.com/shirou/gopsutil/v3/@v/v3.23.10.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        github.com/spf13/pflag: github.com/spf13/pflag@v1.0.6-0.20210604193023-d5e0c0615ace: Get "https://proxy.golang.org/github.com/spf13/pflag/@v/v1.0.6-0.20210604193023-d5e0c0615ace.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        golang.org/x/text/cases: golang.org/x/text@v0.14.0: Get "https://proxy.golang.org/golang.org/x/text/@v/v0.14.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        golang.org/x/text/language: golang.org/x/text@v0.14.0: Get "https://proxy.golang.org/golang.org/x/text/@v/v0.14.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        golift.io/mulery/client: golift.io/mulery@v0.0.4: Get "https://proxy.golang.org/golift.io/mulery/@v/v0.0.4.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/client imports
        golift.io/rotatorr: golift.io/rotatorr@v0.0.0-20230911015553-cd2abbd726c7: Get "https://proxy.golang.org/golift.io/rotatorr/@v/v0.0.0-20230911015553-cd2abbd726c7.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/configfile imports
        github.com/BurntSushi/toml: github.com/BurntSushi/toml@v1.3.2: Get "https://proxy.golang.org/github.com/%21burnt%21sushi/toml/@v/v1.3.2.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/configfile imports
        github.com/dsnet/compress/bzip2: github.com/dsnet/compress@v0.0.1: Get "https://proxy.golang.org/github.com/dsnet/compress/@v/v0.0.1.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/configfile imports
        golang.org/x/crypto/bcrypt: golang.org/x/crypto@v0.14.0: Get "https://proxy.golang.org/golang.org/x/crypto/@v/v0.14.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/configfile imports
        golift.io/cnfgfile: golift.io/cnfgfile@v0.0.0-20230531075023-f880041cc0a0: Get "https://proxy.golang.org/golift.io/cnfgfile/@v/v0.0.0-20230531075023-f880041cc0a0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/logs imports
        golift.io/rotatorr/timerotator: golift.io/rotatorr@v0.0.0-20230911015553-cd2abbd726c7: Get "https://proxy.golang.org/golift.io/rotatorr/@v/v0.0.0-20230911015553-cd2abbd726c7.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/services imports
        github.com/go-ping/ping: github.com/go-ping/ping@v1.1.0: Get "https://proxy.golang.org/github.com/go-ping/ping/@v/v1.1.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/services imports
        github.com/shirou/gopsutil/v3/process: github.com/shirou/gopsutil/v3@v3.23.10: Get "https://proxy.golang.org/github.com/shirou/gopsutil/v3/@v/v3.23.10.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/snapshot imports
        github.com/go-sql-driver/mysql: github.com/go-sql-driver/mysql@v1.7.1: Get "https://proxy.golang.org/github.com/go-sql-driver/mysql/@v/v1.7.1.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/snapshot imports
        github.com/jaypipes/ghw: github.com/jaypipes/ghw@v0.12.0: Get "https://proxy.golang.org/github.com/jaypipes/ghw/@v/v0.12.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/snapshot imports
        github.com/shirou/gopsutil/v3/cpu: github.com/shirou/gopsutil/v3@v3.23.10: Get "https://proxy.golang.org/github.com/shirou/gopsutil/v3/@v/v3.23.10.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/snapshot imports
        github.com/shirou/gopsutil/v3/load: github.com/shirou/gopsutil/v3@v3.23.10: Get "https://proxy.golang.org/github.com/shirou/gopsutil/v3/@v/v3.23.10.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/snapshot imports
        github.com/shirou/gopsutil/v3/mem: github.com/shirou/gopsutil/v3@v3.23.10: Get "https://proxy.golang.org/github.com/shirou/gopsutil/v3/@v/v3.23.10.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/snapshot imports
        golang.org/x/sys/unix: golang.org/x/sys@v0.14.0: Get "https://proxy.golang.org/golang.org/x/sys/@v/v0.14.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/triggers/backups imports
        golift.io/xtractr: golift.io/xtractr@v0.2.2: Get "https://proxy.golang.org/golift.io/xtractr/@v/v0.2.2.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/triggers/backups imports
        modernc.org/sqlite: modernc.org/sqlite@v1.27.0: Get "https://proxy.golang.org/modernc.org/sqlite/@v/v1.27.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/triggers/commands imports
        github.com/hugelgupf/go-shlex: github.com/hugelgupf/go-shlex@v0.0.0-20200702092117-c80c9d0918fa: Get "https://proxy.golang.org/github.com/hugelgupf/go-shlex/@v/v0.0.0-20200702092117-c80c9d0918fa.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/triggers/dashboard imports
        github.com/mrobinsn/go-rtorrent/rtorrent: github.com/mrobinsn/go-rtorrent@v1.8.0: Get "https://proxy.golang.org/github.com/mrobinsn/go-rtorrent/@v/v1.8.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/triggers/data imports
        golift.io/cache: golift.io/cache@v0.0.2: Get "https://proxy.golang.org/golift.io/cache/@v/v0.0.2.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/triggers/filewatch imports
        github.com/nxadm/tail/ratelimiter: github.com/nxadm/tail@v1.4.11: Get "https://proxy.golang.org/github.com/nxadm/tail/@v/v1.4.11.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/ui imports
        github.com/gen2brain/beeep: github.com/gen2brain/beeep@v0.0.0-20230907135156-1a38885a97fc: Get "https://proxy.golang.org/github.com/gen2brain/beeep/@v/v0.0.0-20230907135156-1a38885a97fc.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/ui imports
        github.com/gen2brain/dlgs: github.com/gen2brain/dlgs@v0.0.0-20220603100644-40c77870fa8d: Get "https://proxy.golang.org/github.com/gen2brain/dlgs/@v/v0.0.0-20220603100644-40c77870fa8d.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/ui imports
        github.com/gonutz/w32/v2: github.com/gonutz/w32/v2@v2.10.0: Get "https://proxy.golang.org/github.com/gonutz/w32/v2/@v/v2.10.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/update imports
        golang.org/x/mod/semver: golang.org/x/mod@v0.14.0: Get "https://proxy.golang.org/golang.org/x/mod/@v/v0.14.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
go: github.com/Notifiarr/notifiarr/pkg/cooldown tested by
        github.com/Notifiarr/notifiarr/pkg/cooldown.test imports
        github.com/stretchr/testify/assert: github.com/stretchr/testify@v1.8.4: Get "https://proxy.golang.org/github.com/stretchr/testify/@v/v1.8.4.zip": tls: failed to verify certificate: x509: OSStatus -26276
error: builder for '/nix/store/jm0cw90hf0xkkfgqxqphzrbc8syi5095-notifiarr-go-modules.drv' failed with exit code 1;
       last 10 log lines:
       >   github.com/gen2brain/beeep: github.com/gen2brain/beeep@v0.0.0-20230907135156-1a38885a97fc: Get "https://proxy.golang.org/github.com/gen2brain/beeep/@v/v0.0.0-20230907135156-1a38885a97fc.zip": tls: failed to verify certificate: x509: OSStatus -26276
       > go: github.com/Notifiarr/notifiarr/pkg/ui imports
       >    github.com/gen2brain/dlgs: github.com/gen2brain/dlgs@v0.0.0-20220603100644-40c77870fa8d: Get "https://proxy.golang.org/github.com/gen2brain/dlgs/@v/v0.0.0-20220603100644-40c77870fa8d.zip": tls: failed to verify certificate: x509: OSStatus -26276
       > go: github.com/Notifiarr/notifiarr/pkg/ui imports
       >       github.com/gonutz/w32/v2: github.com/gonutz/w32/v2@v2.10.0: Get "https://proxy.golang.org/github.com/gonutz/w32/v2/@v/v2.10.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
       > go: github.com/Notifiarr/notifiarr/pkg/update imports
       >    golang.org/x/mod/semver: golang.org/x/mod@v0.14.0: Get "https://proxy.golang.org/golang.org/x/mod/@v/v0.14.0.zip": tls: failed to verify certificate: x509: OSStatus -26276
       > go: github.com/Notifiarr/notifiarr/pkg/cooldown tested by
       >         github.com/Notifiarr/notifiarr/pkg/cooldown.test imports
       >       github.com/stretchr/testify/assert: github.com/stretchr/testify@v1.8.4: Get "https://proxy.golang.org/github.com/stretchr/testify/@v/v1.8.4.zip": tls: failed to verify certificate: x509: OSStatus -26276
       For full logs, run 'nix log /nix/store/jm0cw90hf0xkkfgqxqphzrbc8syi5095-notifiarr-go-modules.drv'.
error: 1 dependencies of derivation '/nix/store/fj7b61sx5aw2ixfzlk3zslbm1gdhzw8f-notifiarr.drv' failed to build

One example should be enough, but this happens for every Go package I’ve tried so far.
Go packages from nixpkgs work, but I guess they are coming from binary cache.
Doing nix-shell -p go, git cloning the go package manually and running go vendor inside also works.