diff --git a/steps/SHA256SUMS.pkgs b/steps/SHA256SUMS.pkgs
index 4387993..d6c16ef 100644
--- a/steps/SHA256SUMS.pkgs
+++ b/steps/SHA256SUMS.pkgs
@@ -31,7 +31,7 @@ f0bb18831983493b82fde53917e8d16c6a380761ac5e71e14769a82193fee788  bison-2.3_0.ta
 4a291da4dc1d2a49eeff6bd6017d0d91f804d0a8a2b701de9ed5c53cf5061fe4  bison-3.4.1_2.tar.bz2
 6d5e4debdec03aee096dbcefcad878fb5c6a069f895ee7ade878d9eeb97fb83e  bison-3.4.2_0.tar.bz2
 e196396a3073992ca4d8ce1606831e3a6e06fd22753f89b778eec01eed549a92  bzip2-1.0.8_0.tar.bz2
-c511d571d24675a141258e0e198c5ed1bcfd4889ddd736ff8e25c0d97b44e2cf  ca-certificates-3.88.1_0.tar.bz2
+543214998317d764595d3dd247a1fb2e0803ad77978b8474bd24d64c161b9530  ca-certificates-3.95_0.tar.bz2
 692ec3f83fdd94a3687c764e6246f608e4600bc8f9fec953a0b23617ad24d08d  coreutils-5.0_0.tar.bz2
 09092e187588c5d33c023ac41671b367aef9f7ee967d2c7c03430b33cc03f251  coreutils-6.10_0.tar.bz2
 f49900486ae7f0c8107d729b71ede155ee44544cdf8d562b50fbea4095bd05b2  coreutils-8.32_0.tar.bz2
diff --git a/steps/ca-certificates-3.88.1/sources b/steps/ca-certificates-3.88.1/sources
deleted file mode 100644
index 8bb9f44..0000000
--- a/steps/ca-certificates-3.88.1/sources
+++ /dev/null
@@ -1 +0,0 @@
-http://ftp.mozilla.org/pub/security/nss/releases/NSS_3_88_1_RTM/src/nss-3.88.1.tar.gz 27d243edf87d1cf1bb9c861f03d387e0e9230ce5017f4308c941f558b54b3496
diff --git a/steps/ca-certificates-3.88.1/pass1.sh b/steps/ca-certificates-3.95/pass1.sh
similarity index 100%
rename from steps/ca-certificates-3.88.1/pass1.sh
rename to steps/ca-certificates-3.95/pass1.sh
diff --git a/steps/ca-certificates-3.95/sources b/steps/ca-certificates-3.95/sources
new file mode 100644
index 0000000..03ca38b
--- /dev/null
+++ b/steps/ca-certificates-3.95/sources
@@ -0,0 +1 @@
+http://ftp.mozilla.org/pub/security/nss/releases/NSS_3_95_RTM/src/nss-3.95.tar.gz 469888e41e8a780051ce00edcd914e8a6bd38da88a82cfb84898dd388635822a
diff --git a/steps/manifest b/steps/manifest
index b84e273..9df2afe 100644
--- a/steps/manifest
+++ b/steps/manifest
@@ -144,7 +144,7 @@ build: dist-3.5-236
 build: perl-5.32.1
 build: libarchive-3.5.2
 build: openssl-1.1.1l
-build: ca-certificates-3.88.1
+build: ca-certificates-3.95
 build: curl-7.88.1
 build: zlib-1.2.13
 build: automake-1.16.3