diff --git a/.gitignore b/.gitignore
index 5dc6037..cb293cf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -298,3 +298,5 @@ pykickstart-1.78.tar.gz
 /pykickstart-3.71.tar.gz.asc
 /pykickstart-3.72.tar.gz
 /pykickstart-3.72.tar.gz.asc
+/pykickstart-3.73.tar.gz
+/pykickstart-3.73.tar.gz.asc
diff --git a/pykickstart.spec b/pykickstart.spec
index 12fff22..538a652 100644
--- a/pykickstart.spec
+++ b/pykickstart.spec
@@ -4,7 +4,7 @@
 %bcond_with signed
 
 Name:      pykickstart
-Version:   3.72
+Version:   3.73
 Release:   1%{?dist}
 License:   GPL-2.0-only
 Summary:   Python utilities for manipulating kickstart files.
@@ -79,6 +79,10 @@ LC_ALL=C make PYTHON=%{__python3} test-no-coverage
 %{python3_sitelib}/pykickstart-%{version}.dist-info
 
 %changelog
+* Wed May 20 2026 Brian C. Lane <bcl@redhat.com> - 3.73-1
+- Add --type option to %certificate section (rvykydal)
+  Resolves: RHEL-143387
+
 * Thu Apr 30 2026 Brian C. Lane <bcl@redhat.com> - 3.72-1
 - rhell11: Update handlers for removed commands (bcl)
 - vnc: Remove command in F45 (bcl)
diff --git a/sources b/sources
index bc67f6b..52fff88 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (pykickstart-3.72.tar.gz) = c9ee4e33fca6bd5216c5c72ce0ff7fd9a03757632efac679ae6a246d85e3645b4fd729c7ef48f2165e5c31be673c0b71322fa25724e4f4c46dcc410ab72bce07
-SHA512 (pykickstart-3.72.tar.gz.asc) = 6966796bc99c49c246cca45327bdbeb2946abef8442c299c2064cf93e0155c4bad75443f673cd1a1e673f6a69c37d17022aaf5c17f8b37aaa601887a66c5e4b3
+SHA512 (pykickstart-3.73.tar.gz) = 1bccb266f2c4ad806edc7db392c361bbeafe2f2f84b2de16a053a520adabff1d9112cb515b10245b940af0c5a0567be33a9540e0512ebe031163ed115284af10
+SHA512 (pykickstart-3.73.tar.gz.asc) = 88022cabd612c667dc31b688b0162412fdc9c5db548e24884245fbfc7573992dec0bc8228778661292d263c35982f440c511984d1ee5f13314014ccb333fd696