diff --git a/infrastructure/cert-manager/duckdns-issuer.yaml b/infrastructure/cert-manager/duckdns-issuer.yaml
deleted file mode 100644
index 7f10fc4..0000000
--- a/infrastructure/cert-manager/duckdns-issuer.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-# infrastructure/cert-manager/duckdns-issuer.yaml
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: duckdns
-spec:
-  acme:
-    server: https://acme-v02.api.letsencrypt.org/directory
-    email: jij@example.com
-    solvers:
-    - dns01:
-        webhook:
-          groupName: acme.zacharysegnbauer.com   # webhook-specifiek — check repo
-          solverName: duckdns
-          config:
-            secretName: duckdns-token
-            subdomain: zb-kw
-            subdomains: "*"   # of wildcard via token-methode
\ No newline at end of file
diff --git a/infrastructure/cert-manager/wildcard-cert.yaml b/infrastructure/cert-manager/wildcard-cert.yaml
new file mode 100644
index 0000000..b4a9871
--- /dev/null
+++ b/infrastructure/cert-manager/wildcard-cert.yaml
@@ -0,0 +1,33 @@
+# infrastructure/cert-manager/duckdns-issuer.yaml
+# apiVersion: cert-manager.io/v1
+# kind: ClusterIssuer
+# metadata:
+#   name: duckdns
+# spec:
+#   acme:
+#     server: https://acme-v02.api.letsencrypt.org/directory
+#     email: wulsspaans@gmail.com
+#     privateKeySecretRef:
+#       name: duckdns-account-key        # account-key wordt hierin opgeslagen
+#     solvers:
+#     - dns01:
+#         webhook:
+#           groupName: acme.duckdns.org   # <-- dit is de juiste waarde
+#           solverName: duckdns
+#           config:
+#             apiTokenSecretRef:          # <-- let op: niet secretName/subdomain!
+#               name: duckdns-token
+#               key: token
+
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: zb-kw-wildcard
+  namespace: argocd
+spec:
+  secretName: zb-kw-wildcard-tls
+  dnsNames:
+  - '*.zb-kw.duckdns.org'
+  issuerRef:
+    name: duckdns
+    kind: ClusterIssuer
\ No newline at end of file