diff --git a/Cargo.lock b/Cargo.lock
index ee4572ad0e3..12f842fa80d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -7074,6 +7074,7 @@ dependencies = [
  "ring 0.17.8",
  "rsa",
  "rustix",
+ "rustls-pki-types",
  "schemars",
  "scopeguard",
  "semver 1.0.23",
@@ -8860,12 +8861,13 @@ dependencies = [
 
 [[package]]
 name = "rcgen"
-version = "0.12.1"
+version = "0.13.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "48406db8ac1f3cbc7dcdb56ec355343817958a356ff430259bb07baf7607e1e1"
+checksum = "54077e1872c46788540de1ea3d7f4ccb1983d12f9aa909b234468676c1a36779"
 dependencies = [
  "pem",
  "ring 0.17.8",
+ "rustls-pki-types",
  "time",
  "yasna",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index b7b34390e78..3ff4b2424cd 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -516,7 +516,7 @@ rand_distr = "0.4.3"
 rand_seeder = "0.3.0"
 ratatui = "0.28.0"
 rayon = "1.10"
-rcgen = "0.12.1"
+rcgen = "0.13.1"
 reedline = "0.33.0"
 ref-cast = "1.0"
 regex = "1.10.6"
diff --git a/workspace-hack/Cargo.toml b/workspace-hack/Cargo.toml
index 4580173e48e..706ca827b55 100644
--- a/workspace-hack/Cargo.toml
+++ b/workspace-hack/Cargo.toml
@@ -94,6 +94,7 @@ regex-syntax = { version = "0.8.4" }
 reqwest = { version = "0.11.27", features = ["blocking", "cookies", "json", "rustls-tls", "stream"] }
 ring = { version = "0.17.8", features = ["std"] }
 rsa = { version = "0.9.6", features = ["serde", "sha2"] }
+rustls-pki-types = { version = "1.7.0", features = ["std"] }
 schemars = { version = "0.8.21", features = ["bytes", "chrono", "uuid1"] }
 scopeguard = { version = "1.2.0" }
 semver = { version = "1.0.23", features = ["serde"] }
@@ -204,6 +205,7 @@ regex-syntax = { version = "0.8.4" }
 reqwest = { version = "0.11.27", features = ["blocking", "cookies", "json", "rustls-tls", "stream"] }
 ring = { version = "0.17.8", features = ["std"] }
 rsa = { version = "0.9.6", features = ["serde", "sha2"] }
+rustls-pki-types = { version = "1.7.0", features = ["std"] }
 schemars = { version = "0.8.21", features = ["bytes", "chrono", "uuid1"] }
 scopeguard = { version = "1.2.0" }
 semver = { version = "1.0.23", features = ["serde"] }