diff --git a/argocd/apps/cert-manager/include/api-s3-cerficate.yaml b/argocd/apps/cert-manager/include/api-s3-cerficate.yaml
new file mode 100644
index 0000000..e25ad32
--- /dev/null
+++ b/argocd/apps/cert-manager/include/api-s3-cerficate.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: innovation-hub-niedersachsen.de-api-s3
+  namespace: kube-system
+spec:
+  secretName: api-s3-tls
+  commonName: 'api-s3.innovation-hub-niedersachsen.de'
+  dnsNames:
+    - 'api-s3.innovation-hub-niedersachsen.de'
+  issuerRef:
+    name: lets-encrypt
+    kind: ClusterIssuer
+    group: cert-manager.io
diff --git a/argocd/apps/cert-manager/include/s3-cerficate.yaml b/argocd/apps/cert-manager/include/s3-cerficate.yaml
new file mode 100644
index 0000000..65bf654
--- /dev/null
+++ b/argocd/apps/cert-manager/include/s3-cerficate.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: innovation-hub-niedersachsen.de-s3
+  namespace: kube-system
+spec:
+  secretName: s3-tls
+  commonName: 's3.innovation-hub-niedersachsen.de'
+  dnsNames:
+    - 's3.innovation-hub-niedersachsen.de'
+  issuerRef:
+    name: lets-encrypt
+    kind: ClusterIssuer
+    group: cert-manager.io