diff --git a/k8s/core/cert-manager/self-signed.yaml b/k8s/core/cert-manager/self-signed.yaml
index a7c0d39..0999794 100644
--- a/k8s/core/cert-manager/self-signed.yaml
+++ b/k8s/core/cert-manager/self-signed.yaml
@@ -13,6 +13,7 @@ metadata:
   name: hexor-ca-root
 spec:
   isCA: true
+  duration: 87600h # 10y
   commonName: hexor-ca
   secretName: hexor-ca-root-secret
   issuerRef: