diff --git a/security/py-pyhanko-cli/Makefile b/security/py-pyhanko-cli/Makefile
index 1850b8d83fd5..dd921ddf53f9 100644
--- a/security/py-pyhanko-cli/Makefile
+++ b/security/py-pyhanko-cli/Makefile
@@ -1,31 +1,32 @@
 PORTNAME=	pyhanko-cli
-PORTVERSION=	0.3.1
+PORTVERSION=	0.4.0
 CATEGORIES=	security python
 MASTER_SITES=	PYPI
 PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
 DISTNAME=	pyhanko_cli-${PORTVERSION}
 
 MAINTAINER=	sunpoet@FreeBSD.org
 COMMENT=	CLI tools for stamping and signing PDF files
 WWW=		https://docs.pyhanko.eu/en/latest/cli-guide/ \
 		https://github.com/MatthiasValvekens/pyHanko/tree/master/pkgs/pyhanko-cli \
 		https://github.com/MatthiasValvekens/pyHanko
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 BUILD_DEPENDS=	${PYTHON_PKGNAMEPREFIX}setuptools>=61:devel/py-setuptools@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}wheel>=0:devel/py-wheel@${PY_FLAVOR}
 RUN_DEPENDS=	${PYTHON_PKGNAMEPREFIX}asn1crypto>=1.5.1:devel/py-asn1crypto@${PY_FLAVOR} \
+		${PYTHON_PKGNAMEPREFIX}certifi>=2023.5.7:security/py-certifi@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}click>=8.1.3:devel/py-click@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}platformdirs>=4.3.8:devel/py-platformdirs@${PY_FLAVOR} \
-		${PYTHON_PKGNAMEPREFIX}pyhanko>=0.34.1<0.35:security/py-pyhanko@${PY_FLAVOR} \
-		${PYTHON_PKGNAMEPREFIX}pyhanko-certvalidator>=0.30.1<0.31:security/py-pyhanko-certvalidator@${PY_FLAVOR} \
+		${PYTHON_PKGNAMEPREFIX}pyhanko>=0.35.0<0.36:security/py-pyhanko@${PY_FLAVOR} \
+		${PYTHON_PKGNAMEPREFIX}pyhanko-certvalidator>=0.31.0<0.32:security/py-pyhanko-certvalidator@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}tzlocal>=4.3:devel/py-tzlocal@${PY_FLAVOR}
 
 USES=		python
 USE_PYTHON=	autoplist concurrent pep517
 
 NO_ARCH=	yes
 
 .include <bsd.port.mk>
diff --git a/security/py-pyhanko-cli/distinfo b/security/py-pyhanko-cli/distinfo
index 220b98aab43d..94e5df561482 100644
--- a/security/py-pyhanko-cli/distinfo
+++ b/security/py-pyhanko-cli/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1775587586
-SHA256 (pyhanko_cli-0.3.1.tar.gz) = 8d20ae64c903850855767e0967588f6ca18ae08c7481973d724bd644e21a79fb
-SIZE (pyhanko_cli-0.3.1.tar.gz) = 8379705
+TIMESTAMP = 1778023450
+SHA256 (pyhanko_cli-0.4.0.tar.gz) = 7b1f87e5e94afbce3be52ad1c584d88f6bba36ae20905a412f14c0960237c188
+SIZE (pyhanko_cli-0.4.0.tar.gz) = 7189370