diff --git a/system-apps/cert-manager/config/Certificates/dubyatp-xyz.yaml b/system-apps/cert-manager/config/Certificates/dubyatp-xyz.yaml
new file mode 100644
index 0000000..e9d2c8c
--- /dev/null
+++ b/system-apps/cert-manager/config/Certificates/dubyatp-xyz.yaml
@@ -0,0 +1,19 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: dubyatp-xyz
+  namespace: cert-manager
+spec:
+  commonName: '*.dubyatp.xyz'
+  dnsNames:
+  - dubyatp.xyz
+  - '*.dubyatp.xyz'
+  - '*.infra.dubyatp.xyz'
+  issuerRef:
+    kind: ClusterIssuer
+    name: letsencrypt-dubyatp-xyz
+  secretName: cert-dubyatp-xyz
+  secretTemplate:
+    annotations:
+      replicator.v1.mittwald.de/replication-allowed: "true"
+      replicator.v1.mittwald.de/replication-allowed-namespaces: '*'
\ No newline at end of file