diff --git a/renew-certs.yaml b/renew-certs.yaml
index 449561a8438fa720a0f5e7b6be34dd48f2c8ab2d..5d166af93c6df85b351046e8dbec31bd4ffbae3f 100644
--- a/renew-certs.yaml
+++ b/renew-certs.yaml
@@ -51,7 +51,7 @@
           - Restart Nginx on host01
         host: host01
         subject_alt_name: |-
-          DNS:ns1.shore.co.il,DNS:lam.shore.co.il,DNS:nextcloud.shore.co.il,DNS:git.shore.co.il,DNS:code.shore.co.il
+          DNS:ns1.shore.co.il,DNS:lam.shore.co.il,DNS:nextcloud.shore.co.il,DNS:git.shore.co.il,DNS:code.shore.co.il,DNS:vouch.shore.co.il
       tags:
         - host01
 
diff --git a/roles/router/files/nsd/shore.co.il b/roles/router/files/nsd/shore.co.il
index fa7f3f72ea18f2614c4158867697fb36bf861d71..3fbd40ad4457f8075e8131c69cbac4ce6c487d49 100644
--- a/roles/router/files/nsd/shore.co.il
+++ b/roles/router/files/nsd/shore.co.il
@@ -1,7 +1,7 @@
 $TTL 1h
 $ORIGIN shore.co.il.
 @               IN      SOA     ns1     hostmaster (
-        2021012801
+        2021012901
         1h
         5m
         4w
@@ -63,6 +63,7 @@ mta-sts     IN  CNAME   smtp
 myip        IN  CNAME   ns4
 nextcloud   IN  CNAME   ns1
 registry    IN  CNAME   ns4
+vouch       IN  CNAME   ns1
 www         IN  CNAME   ns4
 
 host01._domainkey IN    TXT     ("v=DKIM1\; k=rsa\;"