diff --git a/certbot/CHANGELOG.md b/certbot/CHANGELOG.md
index 32d575a6b..3c267f1b7 100644
--- a/certbot/CHANGELOG.md
+++ b/certbot/CHANGELOG.md
@@ -14,7 +14,8 @@ Certbot adheres to [Semantic Versioning](https://semver.org/).
 
 ### Fixed
 
-*
+* Certbot for Windows has been upgraded to use Python 3.9.11, in response to
+  https://www.openssl.org/news/secadv/20220315.txt. 
 
 More details about these changes can be found on our GitHub repo.
 
diff --git a/windows-installer/windows_installer/construct.py b/windows-installer/windows_installer/construct.py
index 85af4ca94..0948b4cfe 100644
--- a/windows-installer/windows_installer/construct.py
+++ b/windows-installer/windows_installer/construct.py
@@ -7,7 +7,7 @@ import subprocess
 import sys
 import time
 
-PYTHON_VERSION = (3, 9, 7)
+PYTHON_VERSION = (3, 9, 11)
 PYTHON_BITNESS = 64
 NSIS_VERSION = '3.06.1'