diff --git a/tasks/renew-cert.yaml b/tasks/renew-cert.yaml
index 0be39e89ff8d0051c388df644f43073b36fbaa81..b2ce1858041caa695c97d43703ed9db98610045d 100644
--- a/tasks/renew-cert.yaml
+++ b/tasks/renew-cert.yaml
@@ -152,7 +152,7 @@
       community.crypto.openssl_dhparam:
         # yamllint disable rule:line-length
         force: |-
-          {{ (ansible_date_time.epoch|int - dhparams_stat.stat.mtime|int)/(60*60*24*7) >= 0 }}
+          {{ (ansible_date_time.epoch|int - dhparams_stat.stat.mtime|int)/(60*60*24*7) >= 4 }}
         # yamllint enable rule:line-length
         mode: 0o0644
         path: *dhparams