diff --git a/kube/deploy/core/ingress/_deps/certs.yaml b/kube/deploy/core/ingress/_deps/certs.yaml
index 5f78c4c2..04bc125d 100644
--- a/kube/deploy/core/ingress/_deps/certs.yaml
+++ b/kube/deploy/core/ingress/_deps/certs.yaml
@@ -46,7 +46,7 @@ spec:
     kind: ClusterIssuer
   privateKey:
     algorithm: ECDSA
-    size: 521
+    size: 384
     rotationPolicy: Always
   dnsNames:
     - "*.${DNS_MAIN}"
@@ -132,32 +132,6 @@ spec:
 # yaml-language-server: $schema=https://crds.jank.ing/cert-manager.io/certificate_v1.json
 apiVersion: cert-manager.io/v1
 kind: Certificate
-metadata:
-  name: me
-  namespace: ingress
-spec:
-  secretName: "me-tls"
-  secretTemplate:
-    annotations:
-      reflector.v1.k8s.emberstack.com/reflection-allowed: "true"
-      reflector.v1.k8s.emberstack.com/reflection-auto-enabled: "true"
-  additionalOutputFormats:
-    - type: CombinedPEM
-    - type: DER
-  issuerRef:
-    name: letsencrypt-production
-    kind: ClusterIssuer
-  privateKey:
-    algorithm: ECDSA
-    size: 384
-    rotationPolicy: Always
-  dnsNames:
-    - "${DNS_ME}"
-    - "*.${DNS_ME}"
----
-# yaml-language-server: $schema=https://crds.jank.ing/cert-manager.io/certificate_v1.json
-apiVersion: cert-manager.io/v1
-kind: Certificate
 metadata:
   name: home
   namespace: ingress