[Unit]
Description=Update PKI/TLS certificate store weekly

[Timer]
OnCalendar=Sun 02:00:00
Persistent=true

[Install]
WantedBy=timers.target