diff --git a/docs/README.md b/docs/README.md
index 5a74fc1..405fd78 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -1040,7 +1040,7 @@ contract-cli list-encryptioncert-versions
 
 Output:
 ```json
-{"ccco":[{"mod":"1.2.2","fixpacks":["1.2.2.1","1.2.2.2"]},{"mod":"1.2.1","fixpacks":[]},{"mod":"1.2.0","fixpacks":[]}],"ccrt":["26.5.0","26.2.0"],"ccrv":["26.4.1","25.11.0"],"hpvs":["26.5.0","26.2.0"]}
+{"ccco":[{"mod":"1.2.2","fixpacks":["1.2.2.1","1.2.2.2","1.2.2.3"]},{"mod":"1.2.1","fixpacks":[]},{"mod":"1.2.0","fixpacks":[]}],"ccrt":["26.5.0","26.2.0"],"ccrv":["26.4.1","25.11.0"],"hpvs":["26.5.0","26.2.0"]}
 ```
 
 > **Note:** CCRT, CCRV and HPVS list the latest three certificate versions as flat lists.
@@ -1055,7 +1055,7 @@ contract-cli list-encryptioncert-versions --os ccco
 
 Output (latest mod release first; `--ver` accepts any `mod` or `fixpacks` value shown):
 ```json
-{"ccco":[{"mod":"1.2.2","fixpacks":["1.2.2.1","1.2.2.2"]},{"mod":"1.2.1","fixpacks":[]},{"mod":"1.2.0","fixpacks":[]}]}
+{"ccco":[{"mod":"1.2.2","fixpacks":["1.2.2.1","1.2.2.2","1.2.2.3"]},{"mod":"1.2.1","fixpacks":[]},{"mod":"1.2.0","fixpacks":[]}]}
 ```
 
 YAML (`--format yaml`):
@@ -1065,6 +1065,7 @@ ccco:
       fixpacks:
         - 1.2.2.1
         - 1.2.2.2
+        - 1.2.2.3
     - mod: 1.2.1
       fixpacks: []
     - mod: 1.2.0
@@ -1088,6 +1089,7 @@ ccco:
     fixpacks:
       - 1.2.2.1
       - 1.2.2.2
+      - 1.2.2.3
   - mod: 1.2.1
     fixpacks: []
   - mod: 1.2.0
diff --git a/lib/encryptString/encryptString_test.go b/lib/encryptString/encryptString_test.go
index dd0ca63..452b910 100644
--- a/lib/encryptString/encryptString_test.go
+++ b/lib/encryptString/encryptString_test.go
@@ -342,7 +342,7 @@ func TestProcess_CCCO_InvalidCertVersion(t *testing.T) {
 
 // TestProcess_CCCO_ValidCertVersion tests that declared CCCO mod releases and fixpacks are accepted
 func TestProcess_CCCO_ValidCertVersion(t *testing.T) {
-	for _, version := range []string{"1.2.2", "1.2.2.1", "1.2.1"} {
+	for _, version := range []string{"1.2.2", "1.2.2.1", "1.2.2.3", "1.2.1"} {
 		t.Run(version, func(t *testing.T) {
 			result, err := Process(testInputText, TextFormat, "ccco", "", version)
 			assert.NoError(t, err)