diff --git a/deployments/ssl/certmanager.yaml b/deployments/ssl/certmanager.yaml
index 2daccc3..ec6dfbd 100644
--- a/deployments/ssl/certmanager.yaml
+++ b/deployments/ssl/certmanager.yaml
@@ -43,11 +43,11 @@ spec:
     - dns01:
         rfc2136:
           nameserver: hawke.hxst.com.au:53
-          tsigKeyName: "hxme-update-key"
-          tsigAlgorithm: "hmac-sha512"
           tsigSecretSecretRef:
             name: hxme-update-key
             key:  hxme-update-key
+          tsigAlgorithm: HMACSHA256
+          tsigKeyName: hxme-update-key
 ---
 apiVersion: cert-manager.io/v1
 kind: Certificate