diff --git a/Cargo.lock b/Cargo.lock
index 538cf06..70f6a80 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2046,7 +2046,7 @@ dependencies = [
  "pem",
  "rustls-pki-types",
  "time",
- "x509-parser",
+ "x509-parser 0.17.0",
  "yasna",
 ]
 
@@ -2167,7 +2167,7 @@ dependencies = [
  "thiserror 2.0.16",
  "tokio",
  "tracing",
- "x509-parser",
+ "x509-parser 0.18.0",
 ]
 
 [[package]]
@@ -2306,7 +2306,7 @@ dependencies = [
  "serde_json",
  "thiserror 2.0.16",
  "webpki-roots 1.0.2",
- "x509-parser",
+ "x509-parser 0.17.0",
 ]
 
 [[package]]
@@ -3675,6 +3675,23 @@ dependencies = [
  "time",
 ]
 
+[[package]]
+name = "x509-parser"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eb3e137310115a65136898d2079f003ce33331a6c4b0d51f1531d1be082b6425"
+dependencies = [
+ "asn1-rs",
+ "data-encoding",
+ "der-parser",
+ "lazy_static",
+ "nom",
+ "oid-registry",
+ "rusticata-macros",
+ "thiserror 2.0.16",
+ "time",
+]
+
 [[package]]
 name = "yasna"
 version = "0.5.2"
diff --git a/rpxy-certs/Cargo.toml b/rpxy-certs/Cargo.toml
index 4f0a47a..6d614f2 100644
--- a/rpxy-certs/Cargo.toml
+++ b/rpxy-certs/Cargo.toml
@@ -32,7 +32,7 @@ rustls-webpki = { version = "0.103.4", default-features = false, features = [
   "aws-lc-rs",
 ] }
 rustls-post-quantum = { version = "0.2.3", optional = true }
-x509-parser = { version = "0.17.0" }
+x509-parser = { version = "0.18.0" }
 
 [dev-dependencies]
 tokio = { version = "1.47.1", default-features = false, features = [