diff --git a/certbot/mail.grapheneos.org b/certbot/mail.grapheneos.org
index 79f04fa..2d6823a 100644
--- a/certbot/mail.grapheneos.org
+++ b/certbot/mail.grapheneos.org
@@ -2,4 +2,5 @@ certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type rsa --rsa-key-size 3072 --reuse-key --preferred-chain "ISRG Root X1" \
     --deploy-hook "/usr/local/bin/certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \
     --cert-name mail.grapheneos.org \
-    -d mail.grapheneos.org
+    -d mail.grapheneos.org \
+    -d mail.grapheneos.net
diff --git a/certbot/mta-sts.mail.grapheneos.org b/certbot/mta-sts.mail.grapheneos.org
index 596ebda..2f1b0cd 100644
--- a/certbot/mta-sts.mail.grapheneos.org
+++ b/certbot/mta-sts.mail.grapheneos.org
@@ -4,6 +4,7 @@ certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --cert-name mta-sts.mail.grapheneos.org \
     -d mta-sts.mail.grapheneos.org \
     -d mail.grapheneos.org \
+    -d mail.grapheneos.net \
     -d mta-sts.attestation.app \
     -d mta-sts.discuss.grapheneos.org \
     -d mta-sts.grapheneos.app \