diff --git a/src/main/resources/ingress/certificate.yaml b/src/main/resources/ingress/certificate.yaml
index 88acd26..6cb4008 100644
--- a/src/main/resources/ingress/certificate.yaml
+++ b/src/main/resources/ingress/certificate.yaml
@@ -9,7 +9,7 @@ spec:
   secretName: c4k-common-cert
   commonName: FQDN
   duration: 2160h # 90d
-  renewBefore: 480h # 20d
+  renewBefore: 720h # 30d
   dnsNames:
   - FQDN
   issuerRef:
diff --git a/src/test/cljc/dda/c4k_common/ingress_test.cljc b/src/test/cljc/dda/c4k_common/ingress_test.cljc
index 980c6af..3d78d02 100644
--- a/src/test/cljc/dda/c4k_common/ingress_test.cljc
+++ b/src/test/cljc/dda/c4k_common/ingress_test.cljc
@@ -77,7 +77,7 @@
           {:secretName "test-io-cert",
            :commonName "test.de",
            :duration "2160h",
-           :renewBefore "480h",
+           :renewBefore "720h",
            :dnsNames ["test.de" "test.org" "www.test.de" "www.test.org"],
            :issuerRef {:name "prod", :kind "ClusterIssuer"}}}
          (cut/generate-certificate {:fqdns ["test.de" "test.org" "www.test.de" "www.test.org"]
@@ -96,7 +96,7 @@
            {:secretName "web",
             :commonName "test.jit.si",
             :duration "2160h",
-            :renewBefore "480h",
+            :renewBefore "720h",
             :dnsNames ["test.jit.si"],
             :issuerRef {:name "staging", :kind "ClusterIssuer"}}}
           {:apiVersion "networking.k8s.io/v1",