diff --git a/install b/install
index 09868ec..cc96a60 100755
--- a/install
+++ b/install
@@ -24,7 +24,7 @@ dockerComposeVersion="1.28.5"
 
 labcaUrl="https://github.com/hakwerk/labca/"
 boulderUrl="https://github.com/letsencrypt/boulder/"
-boulderTag="release-2021-11-09"
+boulderTag="release-2021-12-06"
 
 # Feature flags
 flag_skip_redis=true
diff --git a/patches/expiration-mailer_main.patch b/patches/expiration-mailer_main.patch
index 3b87d03..0f88520 100644
--- a/patches/expiration-mailer_main.patch
+++ b/patches/expiration-mailer_main.patch
@@ -42,7 +42,7 @@ index 862ed2fe7..e8b0aac3d 100644
  }
  
  func initStats(stats prometheus.Registerer) mailerStats {
-@@ -534,6 +544,32 @@ func main() {
+@@ -535,6 +545,32 @@ func main() {
  	cmd.FailOnError(err, "Failed to load credentials and create gRPC connection to SA")
  	sac := sapb.NewStorageAuthorityClient(conn)
  
@@ -75,7 +75,7 @@ index 862ed2fe7..e8b0aac3d 100644
  	var smtpRoots *x509.CertPool
  	if c.Mailer.SMTPTrustedRootFile != "" {
  		pem, err := ioutil.ReadFile(c.Mailer.SMTPTrustedRootFile)
-@@ -569,6 +605,7 @@ func main() {
+@@ -570,6 +606,7 @@ func main() {
  		c.Mailer.Username,
  		smtpPassword,
  		smtpRoots,
diff --git a/patches/ra_ra.patch b/patches/ra_ra.patch
index 8a5f7ff..ce4de6b 100644
--- a/patches/ra_ra.patch
+++ b/patches/ra_ra.patch
@@ -10,7 +10,7 @@ index 275e64a95..873d5c943 100644
  	"github.com/letsencrypt/boulder/probs"
  	pubpb "github.com/letsencrypt/boulder/publisher/proto"
  	rapb "github.com/letsencrypt/boulder/ra/proto"
-@@ -444,7 +443,7 @@ func (ra *RegistrationAuthorityImpl) validateContacts(ctx context.Context, conta
+@@ -448,7 +447,7 @@ func (ra *RegistrationAuthorityImpl) validateContacts(ctx context.Context, conta
  				contact,
  			)
  		}