diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 0808331..35718cb 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -28,5 +28,5 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-      - uses: cachix/install-nix-action@v30
+      - uses: cachix/install-nix-action@v31
       - run: nix run nixpkgs#taplo -- fmt --check
diff --git a/Cargo.lock b/Cargo.lock
index df7f24f..48a2508 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1224,9 +1224,9 @@ dependencies = [
 
 [[package]]
 name = "dcap-qvl"
-version = "0.2.4"
+version = "0.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c8049b28b1fe35e94bd52f4c20edf7b80b6eeb378faccdd685d5cd82cbc192e"
+checksum = "32ef42eade99e79b9fb9d31532041a0a380a7e849d3486950a40b1afd5bf417c"
 dependencies = [
  "anyhow",
  "asn1_der",
@@ -1234,6 +1234,7 @@ dependencies = [
  "byteorder",
  "chrono",
  "const-oid",
+ "dcap-qvl-webpki",
  "der",
  "futures",
  "hex",
@@ -1249,9 +1250,21 @@ dependencies = [
  "serde_json",
  "tracing",
  "urlencoding",
+ "wasm-bindgen-futures",
  "x509-cert",
 ]
 
+[[package]]
+name = "dcap-qvl-webpki"
+version = "0.103.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70ebdcd097c369fe3422cf3978540e0406148435ec0f4d8ecbbf201c746f19c9"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
 [[package]]
 name = "der"
 version = "0.7.10"
diff --git a/Cargo.toml b/Cargo.toml
index a49e38b..00976ca 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -36,7 +36,7 @@ chrono = "0.4.40"
 clap = { version = "4.5", features = ["std", "derive", "env", "error-context", "help", "usage", "wrap_help"], default-features = false }
 config = { version = "0.15.8", default-features = false, features = ["yaml", "json", "toml", "async"] }
 const-oid = { version = "0.9.6", default-features = false }
-dcap-qvl = "0.2.3"
+dcap-qvl = "0.3.0"
 enumset = { version = "1.1", features = ["serde"] }
 futures = "0.3.31"
 futures-core = { version = "0.3.30", default-features = false }