diff --git a/pkg/ingress/cert_discovery.go b/pkg/ingress/cert_discovery.go
index 92cf082939..8f0952c65d 100644
--- a/pkg/ingress/cert_discovery.go
+++ b/pkg/ingress/cert_discovery.go
@@ -113,6 +113,9 @@ func (d *acmCertDiscovery) loadAllCertificateARNs(ctx context.Context) ([]string
 	}
 	req := &acm.ListCertificatesInput{
 		CertificateStatuses: aws.StringSlice([]string{acm.CertificateStatusIssued}),
+		Includes: &acm.Filters{
+			KeyTypes: aws.StringSlice(acm.KeyAlgorithm_Values()),
+		},
 	}
 	certSummaries, err := d.acmClient.ListCertificatesAsList(ctx, req)
 	if err != nil {