diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d9c66be2..6747ece3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,214 +1,224 @@
 name: ci
 
 on:
-  push:
-    branches: ['main', 'rel-*', 'ci/*']
-  pull_request:
-  merge_group:
-  schedule:
-    - cron: '0 18 * * *'
-  workflow_dispatch:
+    push:
+        branches: ["main", "rel-*", "ci/*"]
+    pull_request:
+    merge_group:
+    schedule:
+        - cron: "0 18 * * *"
+    workflow_dispatch:
 
 env:
-  RUSTFLAGS: -D warnings
+    RUSTFLAGS: -D warnings
 
 jobs:
-  lint:
-    name: Format & clippy
-    runs-on: ubuntu-latest
-    continue-on-error: true
-    steps:
-      - name: Checkout sources
-        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
-      - name: Install rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-        with:
-          components: clippy, rustfmt
-      - run: cargo fmt -- --check
-      - run: cargo clippy --all-features --all-targets
-      # rustls-cert-gen require either aws_lc_rs or ring feature
-      - run: cargo clippy -p rcgen --no-default-features --all-targets
-      - run: cargo clippy --no-default-features --features ring --all-targets
-      - run: cargo clippy --no-default-features --features aws_lc_rs --all-targets
-      - run: cargo clippy --no-default-features --features aws_lc_rs,pem --all-targets
+    lint:
+        name: Format & clippy
+        runs-on: ubuntu-latest
+        continue-on-error: true
+        steps:
+            - name: Checkout sources
+              uses: actions/checkout@v4
+              with:
+                  persist-credentials: false
+            - name: Install rust toolchain
+              uses: dtolnay/rust-toolchain@stable
+              with:
+                  components: clippy, rustfmt
+            - run: cargo fmt -- --check
+            - run: cargo clippy --all-features --all-targets
+            # rustls-cert-gen require either aws_lc_rs or ring feature
+            - run: cargo clippy -p rcgen --no-default-features --all-targets
+            - run: cargo clippy --no-default-features --features ring --all-targets
+            - run: cargo clippy --no-default-features --features aws_lc_rs --all-targets
+            - run: cargo clippy --no-default-features --features aws_lc_rs,pem --all-targets
 
-  rustdoc:
-    name: Documentation
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        toolchain: [stable, nightly]
-    steps:
-      - name: Checkout sources
-        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
-      - name: Install rust toolchain
-        uses: dtolnay/rust-toolchain@master
-        with:
-          toolchain: ${{ matrix.toolchain }}
-      - name: cargo doc (all features)
-        run: cargo doc --all-features --document-private-items
-        env:
-          RUSTDOCFLAGS: ${{ matrix.toolchain == 'nightly' && '-Dwarnings --cfg=docsrs' || '-Dwarnings' }}
+    rustdoc:
+        name: Documentation
+        runs-on: ubuntu-latest
+        strategy:
+            matrix:
+                toolchain: [stable, nightly]
+        steps:
+            - name: Checkout sources
+              uses: actions/checkout@v4
+              with:
+                  persist-credentials: false
+            - name: Install rust toolchain
+              uses: dtolnay/rust-toolchain@master
+              with:
+                  toolchain: ${{ matrix.toolchain }}
+            - name: cargo doc (all features)
+              run: cargo doc --all-features --document-private-items
+              env:
+                  RUSTDOCFLAGS: ${{ matrix.toolchain == 'nightly' && '-Dwarnings --cfg=docsrs' || '-Dwarnings' }}
+
+    check-external-types:
+        name: Validate external types appearing in public API
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout sources
+              uses: actions/checkout@v4
+              with:
+                  persist-credentials: false
+            - name: Install rust toolchain
+              uses: dtolnay/rust-toolchain@master
+              with:
+                  toolchain: nightly-2025-05-04
+                  # ^ sync with https://github.com/awslabs/cargo-check-external-types/blob/main/rust-toolchain.toml
+            - run: cargo install --locked cargo-check-external-types
+            - name: run cargo-check-external-types for rcgen/
+              working-directory: rcgen/
+              run: cargo check-external-types --all-features
 
-  check-external-types:
-    name: Validate external types appearing in public API
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout sources
-        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
-      - name: Install rust toolchain
-        uses: dtolnay/rust-toolchain@master
-        with:
-          toolchain: nightly-2025-05-04
-          # ^ sync with https://github.com/awslabs/cargo-check-external-types/blob/main/rust-toolchain.toml
-      - run: cargo install --locked cargo-check-external-types
-      - name: run cargo-check-external-types for rcgen/
-        working-directory: rcgen/
-        run: cargo check-external-types --all-features
+    semver:
+        name: Check semver compatibility
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout sources
+              uses: actions/checkout@v4
+              with:
+                  persist-credentials: false
 
-  semver:
-    name: Check semver compatibility
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout sources
-        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
+            - name: Check semver
+              uses: obi1kenobi/cargo-semver-checks-action@v2
+              with:
+                  exclude: rustls-cert-gen
 
-      - name: Check semver
-        uses: obi1kenobi/cargo-semver-checks-action@v2
-        with:
-          exclude: rustls-cert-gen
+    msrv:
+        name: Check MSRV
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v4
+            - uses: dtolnay/rust-toolchain@master
+              with:
+                  toolchain: 1.71.0
+            - run: cargo check --locked --lib --all-features
 
-  build-windows:
-    runs-on: windows-latest
-    env:
-      # botan doesn't build on windows if the source is
-      # on a different drive than the artifacts
-      # https://github.com/randombit/botan-rs/issues/82
-      BOTAN_CONFIGURE_LINK_METHOD: copy
-    steps:
-    - uses: actions/checkout@v4
-      with:
-        persist-credentials: false
-    - uses: actions/cache@v4
-      with:
-        path: |
-          ~/.cargo/bin/
-          ~/.cargo/registry/index/
-          ~/.cargo/registry/cache/
-          ~/.cargo/git/db/
-          target/
-          $VCPKG_DEFAULT_BINARY_CACHE
-        key: ${{ runner.os }}-cargo-stable-${{ hashFiles('Cargo.lock') }}
-    - uses: egor-tensin/vs-shell@v2
-      with:
-        arch: amd64
-    - name: Install Rust
-      uses: dtolnay/rust-toolchain@stable
-    - name: Install NASM for aws-lc-rs on Windows
-      uses: ilammy/setup-nasm@v1
-    - name: Run cargo check
-      run: cargo check --all-targets
-    - name: Run the tests
-      run: cargo test
-    - name: Run the tests with x509-parser enabled
-      run: cargo test --features x509-parser
-    - name: Run the tests with aws_lc_rs backend enabled
-      run: cargo test --no-default-features --features aws_lc_rs,pem
-      # rustls-cert-gen require either aws_lc_rs or ring feature
-    - name: Run the tests with no features enabled
-      run: cargo test -p rcgen --no-default-features
+    build-windows:
+        runs-on: windows-latest
+        env:
+            # botan doesn't build on windows if the source is
+            # on a different drive than the artifacts
+            # https://github.com/randombit/botan-rs/issues/82
+            BOTAN_CONFIGURE_LINK_METHOD: copy
+        steps:
+            - uses: actions/checkout@v4
+              with:
+                  persist-credentials: false
+            - uses: actions/cache@v4
+              with:
+                  path: |
+                      ~/.cargo/bin/
+                      ~/.cargo/registry/index/
+                      ~/.cargo/registry/cache/
+                      ~/.cargo/git/db/
+                      target/
+                      $VCPKG_DEFAULT_BINARY_CACHE
+                  key: ${{ runner.os }}-cargo-stable-${{ hashFiles('Cargo.lock') }}
+            - uses: egor-tensin/vs-shell@v2
+              with:
+                  arch: amd64
+            - name: Install Rust
+              uses: dtolnay/rust-toolchain@stable
+            - name: Install NASM for aws-lc-rs on Windows
+              uses: ilammy/setup-nasm@v1
+            - name: Run cargo check
+              run: cargo check --all-targets
+            - name: Run the tests
+              run: cargo test
+            - name: Run the tests with x509-parser enabled
+              run: cargo test --features x509-parser
+            - name: Run the tests with aws_lc_rs backend enabled
+              run: cargo test --no-default-features --features aws_lc_rs,pem
+              # rustls-cert-gen require either aws_lc_rs or ring feature
+            - name: Run the tests with no features enabled
+              run: cargo test -p rcgen --no-default-features
 
-  build:
-    strategy:
-      matrix:
-        os: [macOS-latest, ubuntu-latest]
-        toolchain: [stable, beta, nightly, stable 7 months ago]
-        exclude:
-          - os: macOS-latest
-            toolchain: beta
-          - os: macOS-latest
-            toolchain: nightly
-          - os: macOS-latest
-            toolchain: stable 7 months ago
-    runs-on: ${{ matrix.os }}
-    steps:
-    - uses: actions/checkout@v4
-      with:
-        persist-credentials: false
-    - uses: actions/cache@v4
-      with:
-        path: |
-          ~/.cargo/bin/
-          ~/.cargo/registry/index/
-          ~/.cargo/registry/cache/
-          ~/.cargo/git/db/
-          target/
-        key: ${{ runner.os }}-cargo-${{matrix.toolchain}}-${{ hashFiles('Cargo.lock') }}
-    - name: Install Rust
-      uses: dtolnay/rust-toolchain@master
-      with:
-        toolchain: ${{ matrix.toolchain }}
-    - name: Run cargo check
-      run: cargo check --all-targets
-    - name: Run the tests
-      run: cargo test
-    - name: Run the tests with x509-parser enabled
-      run: cargo test --features x509-parser
-    - name: Run the tests with aws_lc_rs backend enabled
-      run: cargo test --no-default-features --features aws_lc_rs,pem
+    build:
+        strategy:
+            matrix:
+                os: [macOS-latest, ubuntu-latest]
+                toolchain: [stable, beta, nightly, stable 7 months ago]
+                exclude:
+                    - os: macOS-latest
+                      toolchain: beta
+                    - os: macOS-latest
+                      toolchain: nightly
+                    - os: macOS-latest
+                      toolchain: stable 7 months ago
+        runs-on: ${{ matrix.os }}
+        steps:
+            - uses: actions/checkout@v4
+              with:
+                  persist-credentials: false
+            - uses: actions/cache@v4
+              with:
+                  path: |
+                      ~/.cargo/bin/
+                      ~/.cargo/registry/index/
+                      ~/.cargo/registry/cache/
+                      ~/.cargo/git/db/
+                      target/
+                  key: ${{ runner.os }}-cargo-${{matrix.toolchain}}-${{ hashFiles('Cargo.lock') }}
+            - name: Install Rust
+              uses: dtolnay/rust-toolchain@master
+              with:
+                  toolchain: ${{ matrix.toolchain }}
+            - name: Run cargo check
+              run: cargo check --all-targets
+            - name: Run the tests
+              run: cargo test
+            - name: Run the tests with x509-parser enabled
+              run: cargo test --features x509-parser
+            - name: Run the tests with aws_lc_rs backend enabled
+              run: cargo test --no-default-features --features aws_lc_rs,pem
 
-  # Build rustls-cert-gen as a standalone package, see this PR for why it's needed:
-  # https://github.com/rustls/rcgen/pull/206#pullrequestreview-1816197358
-  build-rustls-cert-gen-standalone:
-    name: Build rustls-cert-gen as a standalone package
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout sources
-        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
-      - name: Install rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-      - name: Run the tests
-        run: cargo test --package rustls-cert-gen
+    # Build rustls-cert-gen as a standalone package, see this PR for why it's needed:
+    # https://github.com/rustls/rcgen/pull/206#pullrequestreview-1816197358
+    build-rustls-cert-gen-standalone:
+        name: Build rustls-cert-gen as a standalone package
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout sources
+              uses: actions/checkout@v4
+              with:
+                  persist-credentials: false
+            - name: Install rust toolchain
+              uses: dtolnay/rust-toolchain@stable
+            - name: Run the tests
+              run: cargo test --package rustls-cert-gen
 
-  coverage:
-    name: Measure coverage
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout sources
-        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
-      - uses: actions/cache@v4
-        with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/index/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ runner.os }}-cargo-stable-${{ hashFiles('Cargo.lock') }}
-      - name: Install cargo-llvm-cov
-        uses: taiki-e/install-action@cargo-llvm-cov
-      - name: Install rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-        with:
-          components: llvm-tools
-      - name: Measure coverage
-        run: cargo llvm-cov --all-features --lcov --output-path ./lcov.info
-      - name: Report to codecov.io
-        uses: codecov/codecov-action@v5
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          files: ./lcov.info
-          fail_ci_if_error: false
-          verbose: true
+    coverage:
+        name: Measure coverage
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout sources
+              uses: actions/checkout@v4
+              with:
+                  persist-credentials: false
+            - uses: actions/cache@v4
+              with:
+                  path: |
+                      ~/.cargo/bin/
+                      ~/.cargo/registry/index/
+                      ~/.cargo/registry/cache/
+                      ~/.cargo/git/db/
+                      target/
+                  key: ${{ runner.os }}-cargo-stable-${{ hashFiles('Cargo.lock') }}
+            - name: Install cargo-llvm-cov
+              uses: taiki-e/install-action@cargo-llvm-cov
+            - name: Install rust toolchain
+              uses: dtolnay/rust-toolchain@stable
+              with:
+                  components: llvm-tools
+            - name: Measure coverage
+              run: cargo llvm-cov --all-features --lcov --output-path ./lcov.info
+            - name: Report to codecov.io
+              uses: codecov/codecov-action@v5
+              with:
+                  token: ${{ secrets.CODECOV_TOKEN }}
+                  files: ./lcov.info
+                  fail_ci_if_error: false
+                  verbose: true
diff --git a/Cargo.lock b/Cargo.lock
index 1fda8444..57acecda 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1,6 +1,6 @@
 # This file is automatically @generated by Cargo.
 # It is not intended for manual editing.
-version = 4
+version = 3
 
 [[package]]
 name = "aho-corasick"
@@ -13,9 +13,9 @@ dependencies = [
 
 [[package]]
 name = "anstyle"
-version = "1.0.10"
+version = "1.0.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "55cc3b69f167a1ef2e161439aa98aed94e6028e5f9a59be9a6ffb47aef1651f9"
+checksum = "862ed96ca487e809f1c8e5a8447f6ee2cf102f846893800b20cebdf541fc6bbd"
 
 [[package]]
 name = "anyhow"
@@ -79,15 +79,15 @@ dependencies = [
 
 [[package]]
 name = "autocfg"
-version = "1.4.0"
+version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ace50bade8e6234aa140d9a2f552bbee1db4d353f69b8217bc503490fc1a9f26"
+checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
 
 [[package]]
 name = "aws-lc-fips-sys"
-version = "0.13.6"
+version = "0.13.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e99d74bb793a19f542ae870a6edafbc5ecf0bc0ba01d4636b7f7e0aba9ee9bd3"
+checksum = "2608e5a7965cc9d58c56234d346c9c89b824c4c8652b6f047b3bd0a777c0644f"
 dependencies = [
  "bindgen",
  "cc",
@@ -182,9 +182,9 @@ dependencies = [
 
 [[package]]
 name = "bpaf"
-version = "0.9.19"
+version = "0.9.20"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4848ed5727d39a7573551c205bcb1ccd88c8cad4ed2c80f62e2316f208196b8d"
+checksum = "473976d7a8620bb1e06dcdd184407c2363fe4fec8e983ee03ed9197222634a31"
 dependencies = [
  "bpaf_derive",
 ]
@@ -212,9 +212,9 @@ dependencies = [
 
 [[package]]
 name = "cc"
-version = "1.2.23"
+version = "1.2.27"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f4ac86a9e5bc1e2b3449ab9d7d3a6a405e3d1bb28d7b9be8614f55846ae3766"
+checksum = "d487aa071b5f64da6f19a3e848e3578944b726ee5a4854b82172f02aa876bfdc"
 dependencies = [
  "jobserver",
  "libc",
@@ -232,9 +232,9 @@ dependencies = [
 
 [[package]]
 name = "cfg-if"
-version = "1.0.0"
+version = "1.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
+checksum = "9555578bc9e57714c812a1f84e4fc5b4d21fcb063490c624de019f7464c91268"
 
 [[package]]
 name = "clang-sys"
@@ -347,12 +347,12 @@ checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
 
 [[package]]
 name = "errno"
-version = "0.3.12"
+version = "0.3.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cea14ef9355e3beab063703aa9dab15afd25f0667c341310c1e5274bb1d0da18"
+checksum = "778e2ac28f6c47af28e4907f13ffd1e1ddbd400980a9abd7c8df189bf578a5ad"
 dependencies = [
  "libc",
- "windows-sys 0.59.0",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]
@@ -390,7 +390,7 @@ checksum = "335ff9f135e4384c8150d6f27c6daed433577f86b4750418338c01a1a2528592"
 dependencies = [
  "cfg-if",
  "libc",
- "wasi 0.11.0+wasi-snapshot-preview1",
+ "wasi 0.11.1+wasi-snapshot-preview1",
 ]
 
 [[package]]
@@ -499,18 +499,18 @@ checksum = "830d08ce1d1d941e6b30645f1a0eb5643013d835ce3779a5fc208261dbe10f55"
 
 [[package]]
 name = "libc"
-version = "0.2.172"
+version = "0.2.174"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d750af042f7ef4f724306de029d18836c26c1765a54a6a3f094cbd23a7267ffa"
+checksum = "1171693293099992e19cddea4e8b849964e9846f4acee11b3948bcc337be8776"
 
 [[package]]
 name = "libloading"
-version = "0.8.7"
+version = "0.8.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6a793df0d7afeac54f95b471d3af7f0d4fb975699f972341a4b76988d49cdf0c"
+checksum = "07033963ba89ebaf1584d767badaa2e8fcec21aedea6b8c0346d487d49c28667"
 dependencies = [
  "cfg-if",
- "windows-targets 0.53.0",
+ "windows-targets 0.53.2",
 ]
 
 [[package]]
@@ -533,9 +533,9 @@ checksum = "13dc2df351e3202783a1fe0d44375f7295ffb4049267b0f3018346dc122a1d94"
 
 [[package]]
 name = "memchr"
-version = "2.7.4"
+version = "2.7.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "78ca9ab1a0babb1e7d5695e3530886289c18cf2f87ec19a575a0abdce112e3a3"
+checksum = "32a282da65faaf38286cf3be983213fcf1d2e2a58700e808f83f4ea9a4804bc0"
 
 [[package]]
 name = "minimal-lexical"
@@ -604,9 +604,9 @@ checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
 
 [[package]]
 name = "openssl"
-version = "0.10.72"
+version = "0.10.73"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fedfea7d58a1f73118430a55da6a286e7b044961736ce96a16a17068ea25e5da"
+checksum = "8505734d46c8ab1e19a1dce3aef597ad87dcb4c37e7188231769bd6bd51cebf8"
 dependencies = [
  "bitflags",
  "cfg-if",
@@ -630,9 +630,9 @@ dependencies = [
 
 [[package]]
 name = "openssl-sys"
-version = "0.9.108"
+version = "0.9.109"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e145e1651e858e820e4860f7b9c5e169bc1d8ce1c86043be79fa7b7634821847"
+checksum = "90096e2e47630d78b7d1c20952dc621f957103f8bc2c8359ec81290d75238571"
 dependencies = [
  "cc",
  "libc",
@@ -691,9 +691,9 @@ dependencies = [
 
 [[package]]
 name = "prettyplease"
-version = "0.2.32"
+version = "0.2.35"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "664ec5419c51e34154eec046ebcba56312d5a2fc3b09a06da188e1ad21afadf6"
+checksum = "061c1221631e079b26479d25bbf2275bfe5917ae8419cd7e34f13bfc2aa7539a"
 dependencies = [
  "proc-macro2",
  "syn",
@@ -719,13 +719,13 @@ dependencies = [
 
 [[package]]
 name = "r-efi"
-version = "5.2.0"
+version = "5.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "74765f6d916ee2faa39bc8e68e4f3ed8949b48cccdac59983d287a7cb71ce9c5"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
 
 [[package]]
 name = "rcgen"
-version = "0.14.0"
+version = "0.14.1"
 dependencies = [
  "aws-lc-rs",
  "botan",
@@ -896,9 +896,9 @@ checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
 
 [[package]]
 name = "syn"
-version = "2.0.101"
+version = "2.0.104"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8ce2b7fc941b3a24138a0a7cf8e858bfc6a992e7978a068a5c760deb0ed43caf"
+checksum = "17b6f705963418cdb9927482fa304bc562ece2fdd4f616084c50b7023b435a40"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -1016,9 +1016,9 @@ dependencies = [
 
 [[package]]
 name = "wasi"
-version = "0.11.0+wasi-snapshot-preview1"
+version = "0.11.1+wasi-snapshot-preview1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
 
 [[package]]
 name = "wasi"
@@ -1068,6 +1068,15 @@ dependencies = [
  "windows-targets 0.52.6",
 ]
 
+[[package]]
+name = "windows-sys"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
+dependencies = [
+ "windows-targets 0.53.2",
+]
+
 [[package]]
 name = "windows-targets"
 version = "0.52.6"
@@ -1086,9 +1095,9 @@ dependencies = [
 
 [[package]]
 name = "windows-targets"
-version = "0.53.0"
+version = "0.53.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b1e4c7e8ceaaf9cb7d7507c974735728ab453b67ef8f18febdd7c11fe59dca8b"
+checksum = "c66f69fcc9ce11da9966ddb31a40968cad001c5bedeb5c2b82ede4253ab48aef"
 dependencies = [
  "windows_aarch64_gnullvm 0.53.0",
  "windows_aarch64_msvc 0.53.0",
diff --git a/Cargo.toml b/Cargo.toml
index 25c4831f..7b76eaab 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -12,6 +12,7 @@ x509-parser = "0.17"
 [workspace.package]
 license = "MIT OR Apache-2.0"
 edition = "2021"
+rust-version = "1.71"
 readme = "README.md"
 description = "Rust X.509 certificate generator"
 repository = "https://github.com/rustls/rcgen"
diff --git a/rcgen/Cargo.toml b/rcgen/Cargo.toml
index 7edf9bb6..c311f956 100644
--- a/rcgen/Cargo.toml
+++ b/rcgen/Cargo.toml
@@ -1,12 +1,13 @@
 [package]
 name = "rcgen"
-version = "0.14.0"
+version = "0.14.1"
 documentation = "https://docs.rs/rcgen"
 description.workspace = true
 repository.workspace = true
 readme.workspace = true
 license.workspace = true
 edition.workspace = true
+rust-version.workspace = true
 keywords.workspace = true
 
 [[example]]
diff --git a/rcgen/src/lib.rs b/rcgen/src/lib.rs
index f5a52092..3431a0aa 100644
--- a/rcgen/src/lib.rs
+++ b/rcgen/src/lib.rs
@@ -831,7 +831,7 @@ pub struct SerialNumber {
 	inner: Vec<u8>,
 }
 
-#[expect(clippy::len_without_is_empty)]
+#[allow(clippy::len_without_is_empty)]
 impl SerialNumber {
 	/// Create a serial number from the given byte slice.
 	pub fn from_slice(bytes: &[u8]) -> SerialNumber {
diff --git a/rustls-cert-gen/Cargo.toml b/rustls-cert-gen/Cargo.toml
index f5f6d881..5ba15400 100644
--- a/rustls-cert-gen/Cargo.toml
+++ b/rustls-cert-gen/Cargo.toml
@@ -7,6 +7,7 @@ homepage = "https://github.com/rustls/rcgen/tree/main/rustls-cert-gen"
 repository = "https://github.com/rustls/rcgen"
 license.workspace = true
 edition.workspace = true
+rust-version.workspace = true
 keywords.workspace = true
 
 [features]