diff --git a/apps-kustomized/wildcard/certificate.yaml b/apps-kustomized/wildcard/certificate.yaml
new file mode 100644
index 0000000..0132ed2
--- /dev/null
+++ b/apps-kustomized/wildcard/certificate.yaml
@@ -0,0 +1,11 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wildcard
+spec:
+  dnsNames:
+  - "*.martyn.berlin"
+  issuerRef:
+    kind: ClusterIssuer
+    name: dnsimple-cert-manager-webhook-cert-manager-webhook-dnsimple-production
+  secretName: cluster-ingress-wildcard