diff --git a/CHANGELOG.md b/CHANGELOG.md
index e100e1c..5b96414 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # CHANGELOG
 
+## v0.4.2 (10/12/2016)
+
+* Sign the gem with a new cert that expires in 10 years.
+    Both old and new public certs are in the certs dir.
+
 ## v0.4.1 (9/28/2016)
 
 * Use activesupport for blank support. Remove the extraction.
diff --git a/README.md b/README.md
index fd8e89c..e985f6c 100644
--- a/README.md
+++ b/README.md
@@ -183,7 +183,7 @@ Add my public key (if you haven’t already) as a trusted certificate
 ```
 # Caveat: Gem certificates are trusted globally, such that adding a
 # cert.pem for one gem automatically trusts all gems signed by that cert.
-gem cert --add <(curl -Ls https://raw.github.com/grempe/tss-rb/master/certs/gem-public_cert_grempe.pem)
+gem cert --add <(curl -Ls https://raw.github.com/grempe/tss-rb/master/certs/gem-public_cert_grempe_2026.pem)
 ```
 
 To install, it is possible to specify either `HighSecurity` or `MediumSecurity`
diff --git a/certs/gem-public_cert_grempe_2026.pem b/certs/gem-public_cert_grempe_2026.pem
new file mode 100644
index 0000000..737af5b
--- /dev/null
+++ b/certs/gem-public_cert_grempe_2026.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/lib/tss/version.rb b/lib/tss/version.rb
index 9292c43..da0af05 100644
--- a/lib/tss/version.rb
+++ b/lib/tss/version.rb
@@ -1,3 +1,3 @@
 module TSS
-  VERSION = '0.4.1'.freeze
+  VERSION = '0.4.2'.freeze
 end
diff --git a/tss.gemspec b/tss.gemspec
index 4bef1b0..97a766f 100644
--- a/tss.gemspec
+++ b/tss.gemspec
@@ -11,10 +11,10 @@ Gem::Specification.new do |spec|
 
   spec.required_ruby_version = '>= 2.2.2'
 
-  cert = File.expand_path('~/.gem-certs/gem-private_key_grempe.pem')
+  cert = File.expand_path('~/.gem-certs/gem-private_key_grempe_2026.pem')
   if cert && File.exist?(cert)
     spec.signing_key = cert
-    spec.cert_chain = ['certs/gem-public_cert_grempe.pem']
+    spec.cert_chain = ['certs/gem-public_cert_grempe_2026.pem']
   end
 
   spec.summary = <<-EOF