diff --git a/Cargo.lock b/Cargo.lock
index 70acc28d5..39783ab6c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4496,13 +4496,15 @@ dependencies = [
 
 [[package]]
 name = "rcgen"
-version = "0.12.1"
+version = "0.14.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "48406db8ac1f3cbc7dcdb56ec355343817958a356ff430259bb07baf7607e1e1"
+checksum = "3ec0a99f2de91c3cddc84b37e7db80e4d96b743e05607f647eb236fc0455907f"
 dependencies = [
  "pem",
  "ring",
+ "rustls-pki-types",
  "time",
+ "x509-parser 0.18.0",
  "yasna",
 ]
 
@@ -5916,7 +5918,7 @@ dependencies = [
  "tonic-prost-build",
  "tower 0.5.2",
  "url",
- "x509-parser",
+ "x509-parser 0.17.0",
  "zeroize",
 ]
 
@@ -7827,6 +7829,24 @@ dependencies = [
  "time",
 ]
 
+[[package]]
+name = "x509-parser"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eb3e137310115a65136898d2079f003ce33331a6c4b0d51f1531d1be082b6425"
+dependencies = [
+ "asn1-rs 0.7.1",
+ "data-encoding",
+ "der-parser",
+ "lazy_static",
+ "nom",
+ "oid-registry",
+ "ring",
+ "rusticata-macros",
+ "thiserror 2.0.17",
+ "time",
+]
+
 [[package]]
 name = "xml-rs"
 version = "0.8.28"
diff --git a/cmd/checkers/sysmon/Cargo.toml b/cmd/checkers/sysmon/Cargo.toml
index b36af35cb..4229b672b 100644
--- a/cmd/checkers/sysmon/Cargo.toml
+++ b/cmd/checkers/sysmon/Cargo.toml
@@ -36,4 +36,4 @@ zfs = ["dep:libzetta"]
 tonic-build = "0.9"
 
 [dev-dependencies]
-rcgen = "0.12"
+rcgen = "0.14"
diff --git a/cmd/flowgger/Cargo.toml b/cmd/flowgger/Cargo.toml
index f1e558e08..9e7e86056 100644
--- a/cmd/flowgger/Cargo.toml
+++ b/cmd/flowgger/Cargo.toml
@@ -73,6 +73,6 @@ config-bootstrap = { path = "../../rust/config-bootstrap" }
 [dev-dependencies]
 tempdir = "0.3"
 quickcheck = "1"
-rcgen = "0.12"
+rcgen = "0.14"
 
 ## Release profile now defined at workspace root to avoid non-root profile warning
diff --git a/cmd/trapd/Cargo.toml b/cmd/trapd/Cargo.toml
index b24475c9c..a8703d5c6 100644
--- a/cmd/trapd/Cargo.toml
+++ b/cmd/trapd/Cargo.toml
@@ -30,4 +30,4 @@ config-bootstrap = { path = "../../rust/config-bootstrap" }
 tonic-build = { workspace = true }
 
 [dev-dependencies]
-rcgen = "0.12"
+rcgen = "0.14"