diff --git a/CHANGES b/CHANGES
index dae75172e4..dda61d0b7c 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3768.	[bug]		"dnssec-checkds" was missing the SHA-384 digest
+			algorithm. [RT #34000]
+
 3767.	[func]		Log explicitly when using rndc.key to configure
 			command channel. [RT #35316]
 
diff --git a/bin/python/dnssec-checkds.py.in b/bin/python/dnssec-checkds.py.in
index b6dbdb1950..3a66ee24b4 100644
--- a/bin/python/dnssec-checkds.py.in
+++ b/bin/python/dnssec-checkds.py.in
@@ -57,7 +57,7 @@ def shellquote(s):
 # Delegation Signer (DS) resource record
 ############################################################################
 class DSRR:
-    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST'}
+    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST', 4: 'SHA-384' }
     rrname=''
     rrclass='IN'
     rrtype='DS'
@@ -107,7 +107,7 @@ class DSRR:
 # DNSSEC Lookaside Validation (DLV) resource record
 ############################################################################
 class DLVRR:
-    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST'}
+    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST', 4: 'SHA-384' }
     parent=''
     dlvname=''
     rrname='IN'