diff --git a/manifests/blog-app/certificate.yaml b/manifests/blog-app/certificate.yaml
new file mode 100644
index 0000000..dfbf3a5
--- /dev/null
+++ b/manifests/blog-app/certificate.yaml
@@ -0,0 +1,23 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: blogapp-domain-cert-prod
+  namespace: istio-system
+spec:
+  secretName: blogapp-domain-cert-prod
+  duration: 2160h # 90d
+  renewBefore: 360h # 15d
+  isCA: false
+  privateKey:
+    algorithm: RSA
+    encoding: PKCS1
+    size: 2048
+  usages:
+    - server auth
+    - client auth
+  dnsNames:
+    - "blogapp.magdalani.com"
+  issuerRef:
+    name: letsencrypt-prod-cluster
+    kind: ClusterIssuer
+    group: cert-manager.io
\ No newline at end of file