diff --git a/30-cert-manager/60-auth-cert.yaml b/30-cert-manager/60-auth-cert.yaml
--- a/30-cert-manager/60-auth-cert.yaml
+++ b/30-cert-manager/60-auth-cert.yaml
@@ -7,6 +7,6 @@ spec:
   dnsNames:
   - 'authenticate.bigasterisk.com'
   issuerRef:
-    kind: Issuer
+    kind: ClusterIssuer
     name: letsencrypt-prod
   secretName: pomerium-proxy-tls
\ No newline at end of file