diff --git a/pkgs/tools/security/step-ca/0.15.nix b/pkgs/tools/security/step-ca/0.15.nix
new file mode 100644
index 00000000000000..2242f6db9af9da
--- /dev/null
+++ b/pkgs/tools/security/step-ca/0.15.nix
@@ -0,0 +1,42 @@
+{ lib, buildGoModule, buildGoPackage, fetchFromGitHub }:
+let
+  sha256 = "01y4wi6j1frfpd6ndwrxw4sr9rwhj8m96mvp76rnszzwgvlydgd4";
+  vendorSha256 = "1is4rvga3anmzqqd1bmdw3014lxrvnm19jrfpyvmdqh7pc7cm4i5";
+  version = "0.15.5";
+in
+buildGoModule {
+  inherit vendorSha256;
+  inherit version;
+  pname = "step-ca";
+
+  src = fetchFromGitHub {
+    inherit sha256;
+    owner = "smallstep";
+    repo = "certificates";
+    rev = "v${version}";
+  };
+
+  goPackagePath = "github.com/smallstep/certificates";
+
+  buildPhase = ''
+    runHook preBuild
+    CGO_ENABLED=0 go build -v -o bin/step-ca -ldflags='-w -X "main.Version=${version}" -X "main.BuildTime=1969-12-31 23:59 UTC"' github.com/smallstep/certificates/cmd/step-ca
+  '';
+
+  installPhase = ''
+    mkdir -p $out/bin
+    cp -v bin/* $out/bin
+  '';
+
+  meta = with lib; {
+    description = "A private certificate authority (X.509 & SSH) & ACME server";
+    longDescription = ''
+      A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management,
+      so you can use TLS everywhere & SSO for SSH
+    '';
+    homepage = "https://smallstep.com/certificates/";
+    license = licenses.asl20;
+    maintainers = with maintainers; [ cmcdragonkai ];
+    platforms = with platforms; linux ++ darwin;
+  };
+}
diff --git a/pkgs/tools/security/step-ca/default.nix b/pkgs/tools/security/step-ca/default.nix
index e5574be8ab941a..645b01e763a544 100644
--- a/pkgs/tools/security/step-ca/default.nix
+++ b/pkgs/tools/security/step-ca/default.nix
@@ -16,10 +16,14 @@ buildGoPackage rec {
   goDeps = ./deps.nix;
 
   meta = with lib; {
-    description = "A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH";
+    description = "A private certificate authority (X.509 & SSH) & ACME server";
+    longDescription = ''
+      A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management,
+      so you can use TLS everywhere & SSO for SSH
+    '';
     homepage = "https://smallstep.com/certificates/";
     license = licenses.asl20;
     maintainers = with maintainers; [ cmcdragonkai ];
-    platforms = platforms.linux ++ platforms.darwin;
+    platforms = with platforms; linux ++ darwin;
   };
 }
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index e85382c7891ba1..d5a3cb38923494 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -2518,6 +2518,8 @@ in
 
   step-ca = callPackage ../tools/security/step-ca { };
 
+  step-ca_0_15 = callPackage ../tools/security/step-ca/0.15.nix { };
+
   step-cli = callPackage ../tools/security/step-cli { };
 
   string-machine = callPackage ../applications/audio/string-machine { };