diff --git a/infrastructure/cert-manager/duckdns-issuer.yaml b/infrastructure/cert-manager/duckdns-issuer.yaml
index 7f10fc4..472008a 100644
--- a/infrastructure/cert-manager/duckdns-issuer.yaml
+++ b/infrastructure/cert-manager/duckdns-issuer.yaml
@@ -1,18 +1,33 @@
 # infrastructure/cert-manager/duckdns-issuer.yaml
+# apiVersion: cert-manager.io/v1
+# kind: ClusterIssuer
+# metadata:
+#   name: duckdns
+# spec:
+#   acme:
+#     server: https://acme-v02.api.letsencrypt.org/directory
+#     email: wulsspaans@gmail.com
+#     privateKeySecretRef:
+#       name: duckdns-account-key        # account-key wordt hierin opgeslagen
+#     solvers:
+#     - dns01:
+#         webhook:
+#           groupName: acme.duckdns.org   # <-- dit is de juiste waarde
+#           solverName: duckdns
+#           config:
+#             apiTokenSecretRef:          # <-- let op: niet secretName/subdomain!
+#               name: duckdns-token
+#               key: token
+
 apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
+kind: Certificate
 metadata:
-  name: duckdns
+  name: zb-kw.duckdns.org
+  namespace: services
 spec:
-  acme:
-    server: https://acme-v02.api.letsencrypt.org/directory
-    email: jij@example.com
-    solvers:
-    - dns01:
-        webhook:
-          groupName: acme.zacharysegnbauer.com   # webhook-specifiek — check repo
-          solverName: duckdns
-          config:
-            secretName: duckdns-token
-            subdomain: zb-kw
-            subdomains: "*"   # of wildcard via token-methode
\ No newline at end of file
+  dnsNames:
+  - 'zb-kw.duckdns.org'
+  issuerRef:
+    name: cert-manager-webhook-duckdns-production
+    kind: ClusterIssuer
+  secretName: zb-kw-duckdns-org-tls
\ No newline at end of file