diff --git a/certificates_generator_test.go b/certificates_generator_test.go
index 0769052434..884978a8e2 100644
--- a/certificates_generator_test.go
+++ b/certificates_generator_test.go
@@ -479,6 +479,8 @@ func newTestCertPool(certPEM string) *x509.CertPool {
 		if err != nil {
 			t.Fatal(err)
 		}
+		// Git may check out the fixture with CRLF line endings on Windows.
+		existing = bytes.ReplaceAll(existing, []byte("\r\n"), []byte("\n"))
 		if !bytes.Equal(existing, buf.Bytes()) {
 			t.Fatal("certificates_test.go is out of date; run go generate to update it")
 		}