diff --git a/Cargo.lock b/Cargo.lock
index f80395d3..c7193928 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2505,7 +2505,7 @@ dependencies = [
  "chrono",
  "cms 0.2.3",
  "criterion",
- "der 0.7.10",
+ "der 0.8.2",
  "dotenvy",
  "dpp-common",
  "dpp-crypto",
@@ -2680,7 +2680,7 @@ dependencies = [
  "chrono",
  "cms 0.2.3",
  "const-oid 0.9.6",
- "der 0.7.10",
+ "der 0.8.2",
  "dpp-common",
  "dpp-domain",
  "dpp-types",
diff --git a/crates/dpp-node/Cargo.toml b/crates/dpp-node/Cargo.toml
index 842acb50..add21a76 100644
--- a/crates/dpp-node/Cargo.toml
+++ b/crates/dpp-node/Cargo.toml
@@ -101,7 +101,7 @@ futures        = "0.3"
 # thing that cannot produce the state under test.
 sqlx           = { version = "0.9", default-features = false, features = ["runtime-tokio", "postgres"] }
 cms            = { version = "0.2", default-features = false }
-der            = "0.7"
+der            = "0.8"
 # To move a stored seal certificate's validity window into the past, which is the
 # cheapest way to produce a seal that verifies and whose certificate did not.
 # Already in the graph via `dpp-seal`.
diff --git a/crates/dpp-seal/Cargo.toml b/crates/dpp-seal/Cargo.toml
index 67393c70..310a0983 100644
--- a/crates/dpp-seal/Cargo.toml
+++ b/crates/dpp-seal/Cargo.toml
@@ -127,7 +127,7 @@ xml-sec      = "0.1.20"
 
 cms          = { version = "0.2", default-features = false }
 x509-cert    = "0.2"
-der          = "0.7"
+der          = "0.8"
 const-oid    = "0.9"
 p256         = { version = "0.14", features = ["ecdsa", "pkcs8"] }
 rcgen        = "0.14"