diff --git a/config.dev.yml b/config.dev.yml
index 64a1a06..bdf4fde 100644
--- a/config.dev.yml
+++ b/config.dev.yml
@@ -1,6 +1,6 @@
 DOMAIN_NAME: riskheatmap.security.allizom.org
 ZONE_ID: Z13VQZ50081YZU
-CERTIFICATE_NAME: '*.security.allizom.org'
+CERTIFICATE_ARN: arn:aws:acm:us-east-1:656532927350:certificate/8b9a2a12-c899-445b-b9aa-7808b6a64ab1
 AUTH0_URL: auth-dev.mozilla.auth0.com
 AUDIENCE: https://riskheatmap.security.allizom.org/
 ENVIRONMENT: dev
diff --git a/config.prod.yml b/config.prod.yml
index a07250a..74a186a 100644
--- a/config.prod.yml
+++ b/config.prod.yml
@@ -1,6 +1,6 @@
 DOMAIN_NAME: riskheatmap.security.mozilla.org
 ZONE_ID: ZBALOKPGJTQW
-CERTIFICATE_NAME: 'riskheatmap.security.mozilla.org'
+CERTIFICATE_ARN: arn:aws:acm:us-west-2:371522382791:certificate/b684a800-c589-42e2-ab2a-8c5ca999d8fc
 AUTH0_URL: auth.mozilla.auth0.com
 AUDIENCE: https://riskheatmap.security.mozilla.org/
 ENVIRONMENT: prod
diff --git a/serverless.yml b/serverless.yml
index df62c68..37d87d7 100644
--- a/serverless.yml
+++ b/serverless.yml
@@ -16,7 +16,7 @@ custom:
     stage: ${self:provider.stage}
     createRoute53Record: true
     hostedZoneId:  ${file(config.${self:provider.stage}.yml):ZONE_ID}
-    certificateName: ${file(config.${self:provider.stage}.yml):CERTIFICATE_NAME}
+    certificateArn: ${file(config.${self:provider.stage}.yml):CERTIFICATE_ARN}
     endpointType: "regional"
     enabled: true