diff --git a/.gitignore b/.gitignore
index 4834a30..f6ba285 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,7 +1,6 @@
 SOURCES/BOOTAA64.CSV
 SOURCES/BOOTIA32.CSV
 SOURCES/BOOTX64.CSV
-SOURCES/almalinuxsecurebootca0.cer
 SOURCES/fbaa64.efi
 SOURCES/fbia32.efi
 SOURCES/fbx64.efi
diff --git a/SOURCES/almalinuxsecureboot0.cer b/SOURCES/almalinuxsecureboot0.cer
new file mode 100644
index 0000000..e6bb9db
Binary files /dev/null and b/SOURCES/almalinuxsecureboot0.cer differ
diff --git a/SOURCES/almalinuxsecurebootca0.cer b/SOURCES/almalinuxsecurebootca0.cer
new file mode 100644
index 0000000..d086cd5
Binary files /dev/null and b/SOURCES/almalinuxsecurebootca0.cer differ
diff --git a/SOURCES/shim.rpmmacros b/SOURCES/shim.rpmmacros
index 927affa..5154980 100644
--- a/SOURCES/shim.rpmmacros
+++ b/SOURCES/shim.rpmmacros
@@ -131,7 +131,7 @@ version signed by the UEFI signing service.				\
 	else									\
 		cp -av %{-d*}/%{-b*}%{-a*}.efi %{-b*}%{-a*}-unsigned.efi	\
 	fi									\
-	%{expand:%%sign -i %{-b*}%{-a*}-unsigned.efi -o %{-b*}%{-a*}-signed.efi -n redhatsecureboot501 -a %{SOURCE2} -c %{SOURCE1} } \
+	%{expand:%%sign -i %{-b*}%{-a*}-unsigned.efi -o %{-b*}%{-a*}-signed.efi -n almalinuxsecureboot0 -a %{SOURCE2} -c %{SOURCE1} } \
 	%{nil}
 
 # -a <efiarch>
diff --git a/SPECS/shim.spec b/SPECS/shim.spec
index 4074fec..dd9f860 100644
--- a/SPECS/shim.spec
+++ b/SPECS/shim.spec
@@ -18,7 +18,8 @@ ExcludeArch:	%{ix86}
 ExcludeArch:	%{arm}
 
 Source0:	shim.rpmmacros
-Source1:	almalinuxsecurebootca0.cer
+Source1:	almalinuxsecureboot0.cer
+Source2:	almalinuxsecurebootca0.cer
 
 # keep these two lists of sources synched up arch-wise.  That is 0 and 10
 # match, 1 and 11 match, ...