diff --git a/letsencrypt-aws.py b/letsencrypt-aws.py
index e77ba31..2bc955a 100644
--- a/letsencrypt-aws.py
+++ b/letsencrypt-aws.py
@@ -6,7 +6,7 @@
 
 import acme.challenges
 import acme.client
-import acme.jose
+import josepy
 
 import click
 
@@ -321,7 +321,7 @@ def complete_dns_challenge(logger, acme_client, dns_challenge_completer,
 def request_certificate(logger, acme_client, elb_name, authorizations, csr):
     logger.emit("updating-elb.request-cert", elb_name=elb_name)
     cert_response, _ = acme_client.poll_and_request_issuance(
-        acme.jose.util.ComparableX509(
+        josepy.util.ComparableX509(
             OpenSSL.crypto.load_certificate_request(
                 OpenSSL.crypto.FILETYPE_ASN1,
                 csr.public_bytes(serialization.Encoding.DER),
@@ -462,8 +462,8 @@ def setup_acme_client(s3_client, acme_directory_url, acme_account_key):
 
 def acme_client_for_private_key(acme_directory_url, private_key):
     return acme.client.Client(
-        # TODO: support EC keys, when acme.jose does.
-        acme_directory_url, key=acme.jose.JWKRSA(key=private_key)
+        # TODO: support EC keys, when josepy does.
+        acme_directory_url, key=josepy.JWKRSA(key=private_key)
     )
 
 
diff --git a/requirements.txt b/requirements.txt
index 22817bc..70ab16c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,3 +4,4 @@ click>=6.2
 cryptography>=1.1.2
 pyopenssl>=0.15.1
 rfc3986>=0.3.1
+josepy>=1.0.0