diff --git a/SOURCES/almalinuxsecurebootca0.cer b/SOURCES/almalinuxsecurebootca0.cer
new file mode 100644
index 0000000..6a4e99b
Binary files /dev/null and b/SOURCES/almalinuxsecurebootca0.cer differ
diff --git a/SOURCES/secureboot.cer b/SOURCES/secureboot.cer
deleted file mode 100644
index 4ff8b79..0000000
Binary files a/SOURCES/secureboot.cer and /dev/null differ
diff --git a/SOURCES/securebootca.cer b/SOURCES/securebootca.cer
deleted file mode 100644
index b235400..0000000
Binary files a/SOURCES/securebootca.cer and /dev/null differ
diff --git a/SPECS/fwupdate.spec b/SPECS/fwupdate.spec
index 673a171..6ecaf64 100644
--- a/SPECS/fwupdate.spec
+++ b/SPECS/fwupdate.spec
@@ -5,12 +5,12 @@
 
 Name:           fwupdate
 Version:        11
-Release:        3%{?dist}
+Release:        3%{?dist}.alma.2
 Summary:        Tools to manage UEFI firmware updates
 License:        GPLv2+
 URL:            https://github.com/rhinstaller/fwupdate
 Requires:       %{name}-libs%{?_isa} = %{version}-%{release}
-BuildRequires:  efivar-devel >= %{efivar_version}
+BuildRequires:  efivar-devel < 37
 BuildRequires:  gnu-efi >= %{gnu_efi_version}
 BuildRequires:  gnu-efi-devel >= %{gnu_efi_version}
 BuildRequires:  pesign
@@ -23,8 +23,7 @@ BuildRequires: libsmbios-devel
 ExclusiveArch:  x86_64 aarch64
 Source0:        https://github.com/rhinstaller/fwupdate/releases/download/%{name}-%{version}/%{name}-%{version}.tar.bz2
 Source1:        find-debuginfo-efi.sh
-Source2:        securebootca.cer
-Source3:        secureboot.cer
+Source2:        almalinuxsecurebootca0.cer
 
 Patch0001: Fix-dependency-chain-for-a-parallel-make-issue.patch
 
@@ -105,7 +104,7 @@ make TOPDIR=.. -f ../Makefile OPT_FLAGS="$RPM_OPT_FLAGS" \
      libdir=%{_libdir} bindir=%{_bindir} \
      EFIDIR=%{efidir} %{?_smp_mflags}
 mv -v efi/fwup%{efiarch}.efi efi/fwup%{efiarch}.unsigned.efi
-%pesign -s -i efi/fwup%{efiarch}.unsigned.efi -o efi/fwup%{efiarch}.efi -a %{SOURCE2} -n redhatsecureboot301 -c %{SOURCE3}
+%pesign -s -i efi/fwup%{efiarch}.unsigned.efi -o efi/fwup%{efiarch}.efi -a %{SOURCE2} -n clsecureboot001 -c %{SOURCE3}
 cd ..
 
 %ifarch x86_64
@@ -115,7 +114,7 @@ setarch linux32 -B make TOPDIR=.. -f ../Makefile ARCH=%{efialtarch} \
                         libdir=%{_libdir} bindir=%{_bindir} \
                         EFIDIR=%{efidir} %{?_smp_mflags}
 mv -v efi/fwup%{efialtarch}.efi efi/fwup%{efialtarch}.unsigned.efi
-%pesign -s -i efi/fwup%{efialtarch}.unsigned.efi -o efi/fwup%{efialtarch}.efi -a %{SOURCE2} -n redhatsecureboot301 -c %{SOURCE3}
+%pesign -s -i efi/fwup%{efialtarch}.unsigned.efi -o efi/fwup%{efialtarch}.efi -a %{SOURCE2} -n clsecureboot001 -c %{SOURCE3}
 cd ..
 %endif
 
@@ -201,6 +200,15 @@ make abicheck
 %defattr(-,root,root)
 
 %changelog
+* Mon Feb 27 2023 Eduard Abdullin <eabdullin@cloudlinux.com> - 11-3.alma.2
+- Use AlmaLinux cert
+
+* Thu Oct 14 2021 Eduard Abdullin <eabdullin@cloudlinux.com> - 11-3.alma.1
+- Downgrade to old version efi
+
+* Fri Apr 09 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 11-3.alma
+- Debrand for AlmaLinux
+
 * Thu Feb 21 2019 Javier Martinez Canillas <javierm@redhat.com> 11-3
 - Fix dependency chain issue when doing a parallel make
   Related: rhbz#1677579