Hi, in my case (your reference [1]), I had to set NIX_SSL_CERT_FILE and copy the certificate (providing as the extension .crt) into /etc/ssl/certs/. Then I was able to run nixos-rebuild normally (without worrying about trying to make the build work offline. Perhaps you are missing that
Let me know if it helped.