diff --git a/Cargo.lock b/Cargo.lock
index 410efee..e6347af 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1499,7 +1499,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
 dependencies = [
  "const-oid 0.9.6",
- "der_derive",
+ "der_derive 0.7.3",
  "flagset",
  "pem-rfc7468 0.7.0",
  "zeroize",
@@ -1512,6 +1512,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a878c850e9e421b20262e9b41f9c860e4785fa07541c266b62ff9d1ef998a80a"
 dependencies = [
  "const-oid 0.10.2",
+ "der_derive 0.8.0",
+ "flagset",
  "pem-rfc7468 1.0.0",
  "zeroize",
 ]
@@ -1540,6 +1542,17 @@ dependencies = [
  "syn 2.0.119",
 ]
 
+[[package]]
+name = "der_derive"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59600e2c2d636fde9b65e99cc6445ac770c63d3628195ff39932b8d6d7409903"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
 [[package]]
 name = "deranged"
 version = "0.5.9"
@@ -3123,7 +3136,7 @@ dependencies = [
  "sha1 0.10.7",
  "tap",
  "thiserror 2.0.21",
- "x509-cert",
+ "x509-cert 0.2.5",
 ]
 
 [[package]]
@@ -6529,7 +6542,7 @@ dependencies = [
  "rustls",
  "tc-pty",
  "tokio",
- "x509-cert",
+ "x509-cert 0.3.0",
 ]
 
 [[package]]
@@ -6600,7 +6613,7 @@ dependencies = [
  "tc-net",
  "tokio",
  "tokio-rustls",
- "x509-cert",
+ "x509-cert 0.3.0",
  "zeroize",
 ]
 
@@ -6722,7 +6735,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
 dependencies = [
  "fastrand",
- "getrandom 0.3.4",
+ "getrandom 0.4.3",
  "once_cell",
  "rustix 1.1.5",
  "windows-sys 0.61.2",
@@ -8307,6 +8320,18 @@ dependencies = [
  "tls_codec",
 ]
 
+[[package]]
+name = "x509-cert"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "105ef4642d9cb137ef83d623d0e4bf08b8adf69e9918ca904a174adb6d3d038b"
+dependencies = [
+ "const-oid 0.10.2",
+ "der 0.8.2",
+ "spki 0.8.1",
+ "tls_codec",
+]
+
 [[package]]
 name = "xattr"
 version = "1.6.1"
diff --git a/crates/tc-devserver/Cargo.toml b/crates/tc-devserver/Cargo.toml
index fc91d89..4267383 100644
--- a/crates/tc-devserver/Cargo.toml
+++ b/crates/tc-devserver/Cargo.toml
@@ -23,7 +23,7 @@ ironrdp-server = { version = "0.9", default-features = false, optional = true }
 async-trait = { version = "0.1", optional = true }
 ironrdp-displaycontrol = { version = "0.4", optional = true }
 rcgen = { version = "0.13", default-features = false, features = ["crypto", "ring", "pem"], optional = true }
-x509-cert = { version = "0.2", default-features = false, features = ["std"], optional = true }
+x509-cert = { version = "0.3", default-features = false, features = ["std"], optional = true }
 rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"], optional = true }
 
 [features]
diff --git a/crates/tc-rdp/Cargo.toml b/crates/tc-rdp/Cargo.toml
index 8585dac..2e3c585 100644
--- a/crates/tc-rdp/Cargo.toml
+++ b/crates/tc-rdp/Cargo.toml
@@ -22,7 +22,7 @@ ironrdp-svc = "0.5"
 tokio = { version = "1", features = ["rt", "net", "io-util", "sync", "time", "macros"] }
 tokio-rustls = { version = "0.26", default-features = false, features = ["ring", "tls12"] }
 rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"] }
-x509-cert = { version = "0.2", default-features = false, features = ["std"] }
+x509-cert = { version = "0.3", default-features = false, features = ["std"] }
 crossbeam-channel.workspace = true
 zeroize = "1"
 tc-net.workspace = true