diff --git a/requirements/encryption.txt b/requirements/encryption.txt
index 24534bce57..8f463b50e6 100644
--- a/requirements/encryption.txt
+++ b/requirements/encryption.txt
@@ -1,3 +1,3 @@
 pymongo-auth-aws>=1.3.0,<2.0.0
 pymongocrypt>=1.13.0,<2.0.0
-certifi>=2023.7.22;os.name=='nt' or sys_platform=='darwin'
+certifi>=2026.6.17;os.name=='nt' or sys_platform=='darwin'
diff --git a/requirements/ocsp.txt b/requirements/ocsp.txt
index a95311d894..847ad788a8 100644
--- a/requirements/ocsp.txt
+++ b/requirements/ocsp.txt
@@ -7,7 +7,7 @@
 # store and just use certifi on macOS.
 # pyopenssl, cryptography, and service_identity must be set in tandem.
 # https://www.pyopenssl.org/en/stable/api/ssl.html#OpenSSL.SSL.Context.set_default_verify_paths
-certifi>=2023.7.22;os.name=='nt' or sys_platform=='darwin'
+certifi>=2026.6.17;os.name=='nt' or sys_platform=='darwin'
 pyopenssl>=26.2.0
 requests>=2.23.0,<3.0
 cryptography>=47.0.0