diff --git a/src/Microsoft.AspNetCore.Http.Abstractions/project.json b/src/Microsoft.AspNetCore.Http.Abstractions/project.json
index 1ad6d728ad..6366ad5070 100644
--- a/src/Microsoft.AspNetCore.Http.Abstractions/project.json
+++ b/src/Microsoft.AspNetCore.Http.Abstractions/project.json
@@ -32,7 +32,8 @@
         "System.Globalization.Extensions": "4.0.1-*",
         "System.Linq.Expressions": "4.0.11-*",
         "System.Reflection.TypeExtensions": "4.1.0-*",
-        "System.Runtime.InteropServices": "4.1.0-*"
+        "System.Runtime.InteropServices": "4.1.0-*",
+        "System.Security.Cryptography.X509Certificates": "4.0.0-*"
       },
       "imports": [
         "dotnet5.4"
diff --git a/src/Microsoft.AspNetCore.Http.Features/project.json b/src/Microsoft.AspNetCore.Http.Features/project.json
index a6b8321019..d6ccd9fb46 100644
--- a/src/Microsoft.AspNetCore.Http.Features/project.json
+++ b/src/Microsoft.AspNetCore.Http.Features/project.json
@@ -27,7 +27,7 @@
         "System.Net.WebSockets": "4.0.0-*",
         "System.Runtime.Extensions": "4.1.0-*",
         "System.Security.Claims": "4.0.1-*",
-        "System.Security.Cryptography.X509Certificates": "4.1.0-*",
+        "System.Security.Cryptography.X509Certificates": "4.0.0-*",
         "System.Security.Principal": "4.0.1-*"
       },
       "imports": [