diff --git a/certbot-1.27.0.tar.gz b/certbot-1.27.0.tar.gz
deleted file mode 100644
index 0347d2a..0000000
--- a/certbot-1.27.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:94106fce72ad92fa58b68d18a84c641d3222b24859b75d92c93bd172cd6eb8ac
-size 424359
diff --git a/certbot-1.27.0.tar.gz.asc b/certbot-1.27.0.tar.gz.asc
deleted file mode 100644
index ae0955a..0000000
--- a/certbot-1.27.0.tar.gz.asc
+++ /dev/null
@@ -1,14 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQGzBAABCAAdFiEE8ocbQVKuE8SVGREfRHv2g6o7JsMFAmJxdWsACgkQRHv2g6o7
-JsOcjAwAigblwlwIj5fEDrfnQvjbUXUkicg9TxBhKcV11OCuu34kLp1o6yWOq4Wz
-TJK7Vtvm9EQEvbrIoA9r3HXvTZG44nAnYlwUxyb92MfSJeLGcu67lIKqlK/AMOUJ
-WqJ9iU6+fc/RA0c7wlfX+M433nuA3D2dhAgDkb4YOgk2JxV32pQEgBA9iCHJm6jz
-R8S2oNVjQXF4lxARLQbGtapnbWseubRc5d8qqLERSqcANN44nO5VyATZN8ymknKG
-9wvYgScbQ8g6FXKn1YerghQ5RX21jfbi9CCI6mS6opAuEN+SKhCXpd3W+3eVg+ZY
-k6YYjmjXsIztUt/vWQ0nCY0UbGFkuHRp13kSghqO+4d+1KCMhmXNB26t1DQLrcRJ
-hXmdHuUioNKwVM1n/e4fpYm4wng6fKPoGridgHv4F1t1W2mEjhP5QjRjw/vFOi49
-Y920ZTBYKHdhlPanz+XAFDKuWBzRKYlgtSEWxVKgbuDx3Kicsq47cxmmhHlb/FJO
-sdkQfAHQ
-=/dT7
------END PGP SIGNATURE-----
diff --git a/certbot-1.28.0.tar.gz b/certbot-1.28.0.tar.gz
new file mode 100644
index 0000000..19b9377
--- /dev/null
+++ b/certbot-1.28.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4b54d8cf1f4e372c6755b3f2720ddfd95bad44f619f7473fa388cdd0a7ba8c5c
+size 424449
diff --git a/certbot-1.28.0.tar.gz.asc b/certbot-1.28.0.tar.gz.asc
new file mode 100644
index 0000000..f6fd91c
--- /dev/null
+++ b/certbot-1.28.0.tar.gz.asc
@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQGzBAABCAAdFiEE8ocbQVKuE8SVGREfRHv2g6o7JsMFAmKfqdcACgkQRHv2g6o7
+JsPM4Av9GLgfQDG0BSOdnk9YXDtFvZ1ZTsEqCZXitgWBgcgRtWR66+7sw3FByzeH
+M/Yfo6mkJ/Ie3MAsD8X7TSsbHq2SlSDlWvaIEWoj/8CjcQ3NnzSH+tXX2/BDFn9X
+647nch2P35EdUPvd2Tt0weXEOQp/O5p9P0JYirwsvM6/muizRsyWWlE1tdHPG5vh
+kgyhEMqn82pd3BSeFvAFHIfINspJyNG/tA5mJbt7vEk/170sF/J2jwsl7V/G54LE
+CJnhgdd4oVBod2vuYC6FjkbLkt/ady0frNQsYh0Zg1Kj41Kfy678ej8snpl2IeUX
+Jm4XYkSFtY2AVaft1H/ihxjpcjL0ObAHQzOjoeykNq4DeVl9eMbfYgrk7Zs0TuDQ
+UhDkthxNR3rOuEpiRfot5qgW/uqrxTg5u/ywFoo+1wwgxCeI8SPmNGXoV4+Y3ofG
+bQd69bVbaliP2V2rELi7Q2yJLQ3aMWRkWlgdVAhoYCOJBZCdFUi55oHF90nugz/I
+1vwYBc/9
+=5PeT
+-----END PGP SIGNATURE-----
diff --git a/python-certbot.changes b/python-certbot.changes
index 6b72c35..43f3732 100644
--- a/python-certbot.changes
+++ b/python-certbot.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Jun 24 19:24:23 UTC 2022 - Dirk Müller <dmueller@suse.com>
+
+- update to 1.28.0:
+  * Updated Apache/NGINX TLS configs to document contents are based on ssl-config.mozilla.org
+  * A change to order finalization has been made to the `acme` module and Certbot:
+    - An order's `certificate` field will only be processed if the order's `status` is `valid`.
+    - An order's `error` field will only be processed if the order's `status` is `invalid`.
+
 -------------------------------------------------------------------
 Mon May 30 09:13:58 UTC 2022 - Markéta Machová <mmachova@suse.com>
 
diff --git a/python-certbot.spec b/python-certbot.spec
index 5f4b79f..77171f4 100644
--- a/python-certbot.spec
+++ b/python-certbot.spec
@@ -19,7 +19,7 @@
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 %define skip_python2 1
 Name:           python-certbot
-Version:        1.27.0
+Version:        1.28.0
 Release:        0
 Summary:        ACME client
 License:        Apache-2.0