diff --git a/CHANGELOG b/CHANGELOG
index f16b317..978af38 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,5 @@
+1.13     - Update the certificate of the CA root of hg.mozilla.org. It seems
+           it has changed on September 19th, 2023.
 1.12     - Remove extraneos output at end of downloaded certdata.txt file
          - Work around bug in p11-kit trust extract that allows certificates
            with nss-{email,server}-distust after attribute to enter downstream
diff --git a/make-ca b/make-ca
index fc37e54..a7663be 100644
--- a/make-ca
+++ b/make-ca
@@ -11,7 +11,7 @@
 
 shopt -s extglob;
 
-VERSION="1.12"
+VERSION="1.13"
 MAKE_CA_CONF="/etc/make-ca.conf"
 
 # CA root for hg.mozilla.org