diff --git a/deny.toml b/deny.toml
index 359dd3f6..394a1771 100644
--- a/deny.toml
+++ b/deny.toml
@@ -39,9 +39,3 @@ wildcards = "deny"
 [sources]
 unknown-registry = "deny"
 unknown-git = "deny"
-
-# Dev dependency only.
-# TODO(@cpu): Remove once rcgen cuts a release w/ crl support.
-allow-git = [
-  "https://github.com/est31/rcgen"
-]