diff --git a/setup_https_kubespray/https_certificate.yml b/setup_https_kubespray/https_certificate.yml
index 7c29582..b685c9f 100644
--- a/setup_https_kubespray/https_certificate.yml
+++ b/setup_https_kubespray/https_certificate.yml
@@ -5,6 +5,8 @@ metadata:
   namespace: jhub
 spec:
   secretName: certmanager-tls-jupyterhub
+  duration: 2160h # 90d
+  renewBefore: 360h # 15d
   issuerRef:
     name: letsencrypt-prod
   commonName: js-17-69.jetstream-cloud.org