diff --git a/pkgs/development/python-modules/certipy-ad/default.nix b/pkgs/development/python-modules/certipy-ad/default.nix
index f9ad9d7b3e90..89382569715c 100644
--- a/pkgs/development/python-modules/certipy-ad/default.nix
+++ b/pkgs/development/python-modules/certipy-ad/default.nix
@@ -1,57 +1,62 @@
 {
   lib,
+  argcomplete,
   asn1crypto,
+  beautifulsoup4,
   buildPythonPackage,
   cryptography,
   dnspython,
   dsinternals,
   fetchFromGitHub,
+  httpx,
   impacket,
   ldap3,
   pyasn1,
   pycryptodome,
   pyopenssl,
-  pythonOlder,
   requests,
-  requests-ntlm,
-  unicrypto,
   setuptools,
+  unicrypto,
 }:
 
 buildPythonPackage rec {
   pname = "certipy-ad";
-  version = "4.8.2";
+  version = "5.0.2";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "ly4k";
     repo = "Certipy";
     tag = version;
-    hash = "sha256-Era5iNLJkZIRvN/p3BiD/eDiDQme24G65VSG97tuEOQ=";
+    hash = "sha256-riFhpB8AMDewz7s4d7jKwmezTHFHJrenC3pWKzfAk6Q=";
   };
 
-  postPatch = ''
-    # pin does not apply because our ldap3 contains a patch to fix pyasn1 compability
-    substituteInPlace setup.py \
-      --replace "pyasn1==0.4.8" "pyasn1"
-  '';
+  pythonRelaxDeps = [
+    "argcomplete"
+    "cryptography"
+    "pycryptodome"
+    "ldap3"
+    "pyopenssl"
+  ];
 
-  nativeBuildInputs = [ setuptools ];
+  pythonRemoveDeps = [ "bs4" ];
 
-  propagatedBuildInputs = [
+  build-system = [ setuptools ];
+
+  dependencies = [
+    argcomplete
     asn1crypto
+    beautifulsoup4
     cryptography
     dnspython
     dsinternals
+    httpx
     impacket
     ldap3
     pyasn1
     pycryptodome
     pyopenssl
     requests
-    requests-ntlm
     setuptools
     unicrypto
   ];
@@ -63,10 +68,10 @@ buildPythonPackage rec {
 
   meta = with lib; {
     description = "Library and CLI tool to enumerate and abuse misconfigurations in Active Directory Certificate Services";
-    mainProgram = "certipy";
     homepage = "https://github.com/ly4k/Certipy";
-    changelog = "https://github.com/ly4k/Certipy/releases/tag/${version}";
-    license = with licenses; [ mit ];
+    changelog = "https://github.com/ly4k/Certipy/releases/tag/${src.tag}";
+    license = licenses.mit;
     maintainers = with maintainers; [ fab ];
+    mainProgram = "certipy";
   };
 }