diff --git a/deployments/ssl/certmanager.yaml b/deployments/ssl/certmanager.yaml
index 72f2167..0df7360 100644
--- a/deployments/ssl/certmanager.yaml
+++ b/deployments/ssl/certmanager.yaml
@@ -51,3 +51,18 @@ spec:
           tsigSecretSecretRef:
             name: hxme-update-key
             key:  hxme-update-key
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wildcard-hxme-net
+  namespace: cert-manager
+spec:
+  secretName: wildcard-hxme-net
+  issuerRef:
+    name: letsencrypt-rfc2136
+    kind: ClusterIssuer
+  commonName: "hxme.net"
+  dnsNames:
+    - "hxme.net"
+    - "*.hxme.net"