diff --git a/python-pip.spec b/python-pip.spec
index 13c82a3cceafb08d4cf3da74869a43f09c3e2a6c..47c97878884569adc9b7e07b307556f670f18933 100644
--- a/python-pip.spec
+++ b/python-pip.spec
@@ -6,7 +6,7 @@ pip is the package installer for Python. You can use pip to install packages fro
 %global bashcompdir %(b=$(pkg-config --variable=completionsdir bash-completion 2>/dev/null); echo ${b:-%{_sysconfdir}/bash_completion.d})
 Name:           python-%{srcname}
 Version:        20.3.3
-Release:        3
+Release:        4
 Summary:        A tool for installing and managing Python packages
 License:        MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
 URL:            http://www.pip-installer.org
@@ -42,6 +42,10 @@ A Python wheel of pip to use with venv
 %prep
 %autosetup -n %{srcname}-%{version} -p1
 
+# this goes together with Patch6000
+rm src/pip/_vendor/certifi/*.pem
+sed -i '/\.pem$/d' src/pip.egg-info/SOURCES.txt
+
 %build
 %py3_build_wheel
 
@@ -115,6 +119,9 @@ install -p dist/%{python_wheelname} -t %{buildroot}%{python_wheeldir}
 %{python_wheeldir}/%{python_wheelname}
 
 %changelog
+* Sat Aug 23 2021 shixuantong<shixuantong@huawei.com> - 20.3.3-4
+- delete bounded certificate
+
 * Thu Aug 19 2021 shixuantong<shixuantong@huawei.com> - 20.3.3-3
 - update dummy-certifi.patch