diff --git a/deployments/ssl/certmanager.yaml b/deployments/ssl/certmanager.yaml
index ec6dfbd..dc37aa5 100644
--- a/deployments/ssl/certmanager.yaml
+++ b/deployments/ssl/certmanager.yaml
@@ -43,11 +43,11 @@ spec:
     - dns01:
         rfc2136:
           nameserver: hawke.hxst.com.au:53
+          tsigKeyName: hxme-update-key
+          tsigAlgorithm: "hmac-sha512"
           tsigSecretSecretRef:
             name: hxme-update-key
             key:  hxme-update-key
-          tsigAlgorithm: HMACSHA256
-          tsigKeyName: hxme-update-key
 ---
 apiVersion: cert-manager.io/v1
 kind: Certificate