diff --git a/Formula/l/lego.rb b/Formula/l/lego.rb
index fcb041f1bb1b..7e339e267226 100644
--- a/Formula/l/lego.rb
+++ b/Formula/l/lego.rb
@@ -1,8 +1,8 @@
 class Lego < Formula
   desc "Let's Encrypt client and ACME library"
   homepage "https://go-acme.github.io/lego/"
-  url "https://github.com/go-acme/lego/archive/refs/tags/v4.27.0.tar.gz"
-  sha256 "bd5a07b0cc111e6848d4065581e1da46f1c474db2e32b5e71d9c3f9f7753f303"
+  url "https://github.com/go-acme/lego/archive/refs/tags/v4.28.0.tar.gz"
+  sha256 "22d04b5eb84f01160429c96f41363da939b0105d2b9eff18d7b9b5e4c7cdea94"
   license "MIT"
   head "https://github.com/go-acme/lego.git", branch: "master"
 
@@ -12,12 +12,12 @@ class Lego < Formula
   end
 
   bottle do
-    sha256 cellar: :any_skip_relocation, arm64_tahoe:   "5541f2b175ef0e246d73c8d39bcde63ad23afa7eda99ad2c7e47b3a3e8db8e00"
-    sha256 cellar: :any_skip_relocation, arm64_sequoia: "5541f2b175ef0e246d73c8d39bcde63ad23afa7eda99ad2c7e47b3a3e8db8e00"
-    sha256 cellar: :any_skip_relocation, arm64_sonoma:  "5541f2b175ef0e246d73c8d39bcde63ad23afa7eda99ad2c7e47b3a3e8db8e00"
-    sha256 cellar: :any_skip_relocation, sonoma:        "c66afcb2dc1b246701266e025ef0af270b0ab66c69dca79f2eb82e46a9983397"
-    sha256 cellar: :any_skip_relocation, arm64_linux:   "1d72aff539fe439d6dd9f1215510ea6a62d875c3eada60d185a8ea6e039f1d72"
-    sha256 cellar: :any_skip_relocation, x86_64_linux:  "2cb4418f77830f3b0206fb59640259f734d411c77e613820308298341d9d68a1"
+    sha256 cellar: :any_skip_relocation, arm64_tahoe:   "88987db9b813270813d49ca61434f6685473b70771cbe7b8dcad52ac59dc6bd4"
+    sha256 cellar: :any_skip_relocation, arm64_sequoia: "88987db9b813270813d49ca61434f6685473b70771cbe7b8dcad52ac59dc6bd4"
+    sha256 cellar: :any_skip_relocation, arm64_sonoma:  "88987db9b813270813d49ca61434f6685473b70771cbe7b8dcad52ac59dc6bd4"
+    sha256 cellar: :any_skip_relocation, sonoma:        "cfa97fd29d1acc6314331cee7d00bbe7227efa8a7b17cc5bbc1587c3a04768e3"
+    sha256 cellar: :any_skip_relocation, arm64_linux:   "deb3d91f2b62321c1304e3b637297d9ad429614ee28eeba056dc2bcccd958abd"
+    sha256 cellar: :any_skip_relocation, x86_64_linux:  "367d3233fbd56dc33454bd57b063291f37959f6d2f8bf33c4e58a0e7904f4920"
   end
 
   depends_on "go" => :build