diff --git a/argocd/apps/cert-manager/include/keycloak-cerficate.yaml b/argocd/apps/cert-manager/include/keycloak-cerficate.yaml
new file mode 100644
index 0000000..a859553
--- /dev/null
+++ b/argocd/apps/cert-manager/include/keycloak-cerficate.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: innovation-hub-niedersachsen.de-keycloak
+  namespace: kube-system
+spec:
+  secretName: keycloak-tls
+  commonName: 'keycloak.innovation-hub-niedersachsen.de'
+  dnsNames:
+    - 'keycloak.innovation-hub-niedersachsen.de'
+  issuerRef:
+    name: lets-encrypt
+    kind: ClusterIssuer
+    group: cert-manager.io