diff --git a/haproxy_mcp/tools/certificates.py b/haproxy_mcp/tools/certificates.py
index ec75f9d..6d6fefb 100644
--- a/haproxy_mcp/tools/certificates.py
+++ b/haproxy_mcp/tools/certificates.py
@@ -231,7 +231,7 @@ def _haproxy_issue_cert_impl(domain: str, wildcard: bool) -> str:
     cmd = [ACME_SH, "--issue", "--dns", "dns_cf", "-d", domain]
     if wildcard:
         cmd.extend(["-d", f"*.{domain}"])
-    cmd.extend(["--reloadcmd", reload_cmd])
+    cmd.extend(["--days", "60", "--reloadcmd", reload_cmd])
 
     try:
         logger.info("Issuing certificate for %s", domain)