diff --git a/argocd/apps/cert-manager/include/api-s3-cerficate.yaml b/argocd/apps/cert-manager/include/api-s3-cerficate.yaml
new file mode 100644
index 0000000..36a21db
--- /dev/null
+++ b/argocd/apps/cert-manager/include/api-s3-cerficate.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: api-s3.innovation-hub-niedersachsen.de-tls
+  namespace: kube-system
+spec:
+  secretName: api-s3.innovation-hub-niedersachsen.de-tls
+  commonName: 'api-s3.innovation-hub-niedersachsen.de'
+  dnsNames:
+    - 'api-s3.innovation-hub-niedersachsen.de'
+  issuerRef:
+    name: lets-encrypt
+    kind: ClusterIssuer
+    group: cert-manager.io
diff --git a/argocd/apps/cert-manager/include/s3-cerficate.yaml b/argocd/apps/cert-manager/include/s3-cerficate.yaml
new file mode 100644
index 0000000..35957ea
--- /dev/null
+++ b/argocd/apps/cert-manager/include/s3-cerficate.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: s3.innovation-hub-niedersachsen.de-tls
+  namespace: kube-system
+spec:
+  secretName: s3.innovation-hub-niedersachsen.de-tls
+  commonName: 's3.innovation-hub-niedersachsen.de'
+  dnsNames:
+    - 's3.innovation-hub-niedersachsen.de'
+  issuerRef:
+    name: lets-encrypt
+    kind: ClusterIssuer
+    group: cert-manager.io