diff --git a/SOURCES/clsecureboot001.cer b/SOURCES/clsecureboot001.cer
new file mode 100644
index 0000000..ca9ce5d
Binary files /dev/null and b/SOURCES/clsecureboot001.cer differ
diff --git a/SOURCES/redhatsecurebootca5.cer b/SOURCES/redhatsecurebootca5.cer
deleted file mode 100644
index dfb0284..0000000
Binary files a/SOURCES/redhatsecurebootca5.cer and /dev/null differ
diff --git a/SPECS/shim-unsigned-x64.spec b/SPECS/shim-unsigned-x64.spec
index 4eb56ec..a28293f 100644
--- a/SPECS/shim-unsigned-x64.spec
+++ b/SPECS/shim-unsigned-x64.spec
@@ -8,7 +8,7 @@
 %global __debug_install_post %{SOURCE100} x64 ia32
 %undefine _debuginfo_subpackages
 
-%global efidir %(eval echo $(grep ^ID= /etc/os-release | sed -e 's/^ID=//' -e 's/rhel/redhat/'))
+%global efidir almalinux
 %global shimrootdir %{_datadir}/shim/
 %global shimversiondir %{shimrootdir}/%{version}-%{release}
 %global efiarch x64
@@ -18,13 +18,13 @@
 
 Name:		shim-unsigned-%{efiarch}
 Version:	15
-Release:	9.el8
+Release:	9.el8.alma
 Summary:	First-stage UEFI bootloader
 ExclusiveArch:	x86_64
 License:	BSD
 URL:		https://github.com/rhboot/shim
 Source0:	https://github.com/rhboot/shim/releases/download/%{version}/shim-%{version}.tar.bz2
-Source1:	redhatsecurebootca5.cer
+Source1:	clsecureboot001.cer
 # currently here's what's in our dbx:
 # nothing.
 Source2:	dbx.esl
@@ -233,6 +233,9 @@ cd ..
 %files debugsource -f build-%{efiarch}/debugsource.list
 
 %changelog
+* Fri Mar 18 2022 Eduard Abdullin <eabdullin@almalinux.org> - 15.4-4.alma
+- Use CloudLinux vendor cert
+
 * Thu Sep 17 2020 Peter Jones <pjones@redhat.com> - 15-9.el8
 - Fix an incorrect allocation size.
   Related: rhbz#1877253