diff --git a/SOURCES/net-snmp-5.8-certs.patch b/SOURCES/net-snmp-5.8-certs.patch
new file mode 100644
index 0000000..c4f8393
--- /dev/null
+++ b/SOURCES/net-snmp-5.8-certs.patch
@@ -0,0 +1,12 @@
+diff -urNp a/local/net-snmp-cert b/local/net-snmp-cert
+--- a/local/net-snmp-cert	2021-10-11 09:08:53.451970484 +0200
++++ b/local/net-snmp-cert	2021-10-11 09:11:36.765386413 +0200
+@@ -1002,7 +1002,7 @@ sub make_openssl_conf {
+ rdir            = .
+ dir		= $ENV::DIR
+ RANDFILE	= $rdir/.rand
+-MD		= sha1
++MD		= sha512
+ KSIZE		= 2048
+ CN		= net-snmp.org
+ EMAIL		= admin@net-snmp.org
diff --git a/SPECS/net-snmp.spec b/SPECS/net-snmp.spec
index 6d8cbda..ae5422c 100644
--- a/SPECS/net-snmp.spec
+++ b/SPECS/net-snmp.spec
@@ -10,7 +10,7 @@
 Summary:    A collection of SNMP protocol tools and libraries
 Name:       net-snmp
 Version:    5.8
-Release:    22%{?dist}
+Release:    23%{?dist}
 Epoch:      1
 
 License:    BSD
@@ -68,6 +68,7 @@ Patch39:    net-snmp-5.8-broken-errmsg.patch
 Patch40:    net-snmp-5.8-intermediate-certs.patch
 Patch41:    net-snmp-5.8-fix-cert-crash.patch
 Patch42:    net-snmp-5.8-engine-id.patch
+Patch43:    net-snmp-5.8-certs.patch
 
 # Modern RPM API means at least EL6
 Patch101:   net-snmp-5.8-modern-rpm-api.patch
@@ -235,6 +236,7 @@ rm -r python
 %patch40 -p1 -b .intermediate-certs
 %patch41 -p1 -b .fix-cert-crash
 %patch42 -p1 -b .engine-id
+%patch43 -p1 -b .certs
 
 %patch101 -p1 -b .modern-rpm-api
 
@@ -489,6 +491,9 @@ LD_LIBRARY_PATH=%{buildroot}/%{_libdir} make test
 %{_libdir}/libnetsnmptrapd*.so.%{soname}*
 
 %changelog
+* Mon Oct 11 2021 Josef Ridky <jridky@redhat.com> - 1:5.8-23
+- net-snmp-cert gencert create SHA512 (#1908331)
+
 * Mon Jun 28 2021 Josef Ridky <jridky@redhat.com> - 1:5.8-22
 - update engineTime when sending traps (#1973252)