diff --git a/apps/templates/cert-manager.yaml b/apps/templates/cert-manager.yaml
index 8ec0e10..2e428a9 100644
--- a/apps/templates/cert-manager.yaml
+++ b/apps/templates/cert-manager.yaml
@@ -43,6 +43,10 @@ spec:
           apiTokenSecretRef:
             name: cloudflare-api-token-secret
             key: CLOUDFLARE_API_KEY
+        selector:
+          dnsNames:
+          - 'roxedus.com'
+          - '*.roxedus.com'
 ---
 apiVersion: cert-manager.io/v1
 kind: Certificate
@@ -53,9 +57,8 @@ spec:
   # Secret names are always required.
   secretName: example-com-tls
 
-  # The use of the common name field has been deprecated since 2000 and is
-  # discouraged from being used.
-  commonName: test.roxedus.com
+  dnsNames:
+    - test.roxedus.com
   issuerRef:
     name: roxedus.com-cloudflare
     # We can reference ClusterIssuers by changing the kind here.