apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: example-com
  namespace: default
spec:
  secretName: example-com-tls # <- Secret resource used to store certificate
  issuerRef:
    name: lets-prod # <- name of the issuer, created before
  commonName: '*.example.com'
  dnsNames:
  - example.com
  acme:
    config:
    - dns01:
        provider: route53-dns # <- name of the provider used for creating DNS records
      domains:
      - '*.example.com'
      - example.com