diff --git a/cert-manager/base/mziesel-ca.yaml b/cert-manager/base/mziesel-ca.yaml
index 41d6c84..760e8e4 100644
--- a/cert-manager/base/mziesel-ca.yaml
+++ b/cert-manager/base/mziesel-ca.yaml
@@ -28,3 +28,16 @@ metadata:
 spec:
   ca:
     secretName: mziesel-root-secret
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: whoami.mziesel.nl-cert
+spec:
+  secretName: whoami.mziesel.nl-secret
+  issuerRef:
+    name: mziesel-ca-issuer
+    kind: ClusterIssuer
+  dnsNames:
+    - whoami.mziesel.nl
+---
diff --git a/cert-manager/kustomization.yaml b/cert-manager/kustomization.yaml
index 5c8da89..bf1697e 100644
--- a/cert-manager/kustomization.yaml
+++ b/cert-manager/kustomization.yaml
@@ -4,12 +4,4 @@ kind: Kustomization
 namespace: cert-manager
 
 resources:
-- https://github.com/cert-manager/cert-manager/releases/download/v1.16.1/cert-manager.yaml
 - ./base/mziesel-ca.yaml
-
-# patches:
-#   - path: ./remove-instance-label.jsonpatch.yaml
-#     target:
-#       kind: CustomResourceDefinition
-#       labelSelector: app.kubernetes.io/instance=cert-manager
-#
diff --git a/whoami/base/whoami-ingress.yaml b/whoami/base/whoami-ingress.yaml
index 42652e9..11d1578 100644
--- a/whoami/base/whoami-ingress.yaml
+++ b/whoami/base/whoami-ingress.yaml
@@ -1,15 +1,3 @@
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: whoami.mziesel.nl-cert
-spec:
-  secretName: whoami.mziesel.nl-secret
-  issuerRef:
-    name: mziesel-ca-issuer
-    kind: ClusterIssuer
-  dnsNames:
-    - whoami.mziesel.nl
----
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata: