diff --git a/direnvrc b/direnvrc
index 5e461b3..89910e4 100644
--- a/direnvrc
+++ b/direnvrc
@@ -13,14 +13,6 @@ _nix_import_env() {
   eval "$env"
 
   # `nix-shell --pure` sets invalid ssl certificate paths
-  if [[ "${NIX_SSL_CERT_FILE:-}" = /no-cert-file.crt ]]; then
-    if [[ $1 == __UNSET__ ]]; then
-      unset NIX_SSL_CERT_FILE
-    else
-      export NIX_SSL_CERT_FILE=${impure_ssl_cert_file}
-    fi
-  fi
-
   if [[ "${SSL_CERT_FILE:-}" = /no-cert-file.crt ]]; then
     if [[ $impure_ssl_cert_file == __UNSET__ ]]; then
       unset SSL_CERT_FILE
@@ -29,6 +21,14 @@ _nix_import_env() {
     fi
   fi
 
+  if [[ "${NIX_SSL_CERT_FILE:-}" = /no-cert-file.crt ]]; then
+    if [[ $impure_nix_ssl_cert_file == __UNSET__ ]]; then
+      unset NIX_SSL_CERT_FILE
+    else
+      export NIX_SSL_CERT_FILE=${impure_ssl_cert_file}
+    fi
+  fi
+
   export PATH=$PATH:$path_backup TERM=$term_backup
   if [[ -n ${tmp_backup+x} ]]; then
     export TMPDIR=${tmp_backup}