diff --git a/clusters/titan.lan.huizinga.dev/cert-manager/certificates/huizinga-dev-staging.yaml b/clusters/titan.lan.huizinga.dev/cert-manager/certificates/huizinga-dev-staging.yaml
new file mode 100644
index 0000000..40ac49b
--- /dev/null
+++ b/clusters/titan.lan.huizinga.dev/cert-manager/certificates/huizinga-dev-staging.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: huizinga-dev-staging
+  namespace: default
+spec:
+  secretName: huizinga-dev-staging-tls
+  issuerRef:
+    name: letsencrypt-staging
+    kind: ClusterIssuer
+  commonName: "*.huizinga.dev"
+  dnsNames:
+    - "huizinga.dev"
+    - "*.huizinga.dev"
diff --git a/clusters/titan.lan.huizinga.dev/cert-manager/certificates/kustomization.yaml b/clusters/titan.lan.huizinga.dev/cert-manager/certificates/kustomization.yaml
new file mode 100644
index 0000000..3c1d4ab
--- /dev/null
+++ b/clusters/titan.lan.huizinga.dev/cert-manager/certificates/kustomization.yaml
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - huizinga-dev-staging.yaml
diff --git a/clusters/titan.lan.huizinga.dev/cert-manager/kustomization.yaml b/clusters/titan.lan.huizinga.dev/cert-manager/kustomization.yaml
index a2d1abf..9169de6 100644
--- a/clusters/titan.lan.huizinga.dev/cert-manager/kustomization.yaml
+++ b/clusters/titan.lan.huizinga.dev/cert-manager/kustomization.yaml
@@ -5,3 +5,4 @@ resources:
   - helmrepo.yaml
   - cert-manager.yaml
   - issuers
+  - certificates