diff --git a/kube/60-auth-cert.yaml b/kube/60-auth-cert.yaml
new file mode 100644
--- /dev/null
+++ b/kube/60-auth-cert.yaml
@@ -0,0 +1,12 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: pomerium-proxy-tls
+  namespace: pomerium
+spec:
+  dnsNames:
+  - 'authenticate.bigasterisk.com'
+  issuerRef:
+    kind: Issuer
+    name: letsencrypt-prod
+  secretName: pomerium-proxy-tls
\ No newline at end of file