diff --git a/kustomizations/cert-manager/cluster-issuer/issuer.yaml b/kustomizations/cert-manager/cluster-issuer/issuer.yaml
index 148fa51..87c700d 100644
--- a/kustomizations/cert-manager/cluster-issuer/issuer.yaml
+++ b/kustomizations/cert-manager/cluster-issuer/issuer.yaml
@@ -4,7 +4,7 @@ metadata:
   name: letsencrypt
 spec:
   acme:
-    email: ryan@distrust.co
+    email: team@distrust.co
     privateKeySecretRef:
       name: letsencrypt
     server: https://acme-v02.api.letsencrypt.org/directory
@@ -14,3 +14,21 @@ spec:
           tokenSecretRef:
             name: digitalocean
             key: access-token
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-caution
+spec:
+  acme:
+    email: team@distrust.co
+    privateKeySecretRef:
+      name: letsencrypt-caution
+    server: https://acme-v02.api.letsencrypt.org/directory
+    solvers:
+    - http01:
+        ingress:
+          ingressClassName: nginx
+      selector:
+        dnsZones:
+        - "caution.co"
diff --git a/kustomizations/cert-manager/kustomization.yaml b/kustomizations/cert-manager/kustomization.yaml
index 394350d..6b8d56d 100644
--- a/kustomizations/cert-manager/kustomization.yaml
+++ b/kustomizations/cert-manager/kustomization.yaml
@@ -2,7 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: cert-manager
 resources:
-- https://github.com/james-callahan/cert-manager-kustomize?ref=b9560b4603bffac901c99d7d9d16e5e2a07e44d8
+- https://github.com/james-callahan/cert-manager-kustomize?ref=039fc866e432953a5ceda9bc26155513b535eea4
 - cluster-issuer
 - namespace.yaml
 replacements: