diff --git a/server/certs/sandbox.pem b/server/certs/sandbox.pem
deleted file mode 100644
index 17b6a761..00000000
--- a/server/certs/sandbox.pem
+++ /dev/null
@@ -1,11 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIBpTCCAUqgAwIBAgIUcaflT3yMc6uPJUFaRV5NZtUdXi0wCgYIKoZIzj0EAwIw
-UDELMAkGA1UEBhMCVVMxHzAdBgNVBAoMFk94aWRlIENvbXB1dGVyIENvbXBhbnkx
-IDAeBgNVBAMMF1N1cHBvcnQgU2hlbGwgUHJvdG90eXBlMCIYDzIwMjYwMTI3MTk0
-NzU2WhgPOTk5OTEyMzEyMzU5NTlaMFAxCzAJBgNVBAYTAlVTMR8wHQYDVQQKDBZP
-eGlkZSBDb21wdXRlciBDb21wYW55MSAwHgYDVQQDDBdTdXBwb3J0IFNoZWxsIFBy
-b3RvdHlwZTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABP5+eaTZnpF4tghwJolg
-m8te/yAfAnkgzOV1FJiH0nauoM8gsyoiVAu9CwlHNnivju6TslFFyxBlW5h3eMnJ
-ULwwCgYIKoZIzj0EAwIDSQAwRgIhAIqvomz/EXcZGCti2QwHkdPOMfidDw02/Rwk
-t3x+5DsfAiEAlEeWgVPiLcseslP86MJpLvVPFFO3S08IODCNgOUh7tM=
------END CERTIFICATE-----
diff --git a/server/certs/support-shell-lab-a1.pem b/server/certs/support-shell-lab-a1.pem
new file mode 100644
index 00000000..9c6fb099
--- /dev/null
+++ b/server/certs/support-shell-lab-a1.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/server/certs/support-shell-production-a1.pem b/server/certs/support-shell-production-a1.pem
new file mode 100644
index 00000000..ca3189cd
--- /dev/null
+++ b/server/certs/support-shell-production-a1.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
diff --git a/server/src/main.rs b/server/src/main.rs
index 7cae3f7e..c41ebbb9 100644
--- a/server/src/main.rs
+++ b/server/src/main.rs
@@ -31,7 +31,10 @@ use sush_server::{read_certs, seed_gossip};
 const DEFAULT_ADDRESS: &str = "0.0.0.0:44444";
 const ROOT_LOG_NAME: &str = "sush";
 const REQUEST_MAX_BODY_BYTES: usize = 0xFFFF;
-const TRUST_ANCHORS: &[&[u8]] = &[include_bytes!("../certs/sandbox.pem")];
+const TRUST_ANCHORS: &[&[u8]] = &[
+    include_bytes!("../certs/support-shell-production-a1.pem"),
+    include_bytes!("../certs/support-shell-lab-a1.pem"),
+];
 
 #[derive(Parser)]
 #[clap(name = "Oxide Support Shell Server")]