diff --git a/py/requirements.txt b/py/requirements.txt
index c4d3dfd70d3b3..96a10c1da1787 100644
--- a/py/requirements.txt
+++ b/py/requirements.txt
@@ -1,6 +1,6 @@
 async-generator==1.10
 attrs==21.4.0
-certifi==2022.12.07
+certifi==2023.7.22
 cffi==1.15.0
 cryptography==41.0.2
 dataclasses==0.6
diff --git a/py/requirements_lock.txt b/py/requirements_lock.txt
index 37dde044c37ab..522c49163852e 100644
--- a/py/requirements_lock.txt
+++ b/py/requirements_lock.txt
@@ -19,9 +19,9 @@ attrs==21.4.0 \
     #   outcome
     #   pytest
     #   trio
-certifi==2022.12.07 \
-    --hash=sha256:35824b4c3a97115964b408844d64aa14db1cc518f6562e8d7261699d1350a9e3 \
-    --hash=sha256:4ad3232f5e926d6718ec31cfc1fcadfde020920e278684144551c91769c7bc18
+certifi==2023.7.22 \
+    --hash=sha256:539cc1d13202e33ca466e88b2807e29f4c13049d6d87031a3c110744495cb082 \
+    --hash=sha256:92d6037539857d8206b8f6ae472e8b77db8058fec5937a1ef3f54304089edbb9
     # via -r py/requirements.txt
 cffi==1.15.0 \
     --hash=sha256:00c878c90cb53ccfaae6b8bc18ad05d2036553e6d9d1d9dbcf323bbe83854ca3 \