diff --git a/configuration.nix b/configuration.nix
index 6fbfb3f..c1fa60e 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -208,8 +208,8 @@ in
     retry_join = [ "10.42.0.2" "10.42.0.21" "10.42.0.22" "10.42.0.23" ];
 
     ca_file = "/var/lib/consul/pki/consul-ca.crt";
-    cert_file = "/var/lib/consul/pki/consul2021.crt";
-    key_file = "/var/lib/consul/pki/consul2021.key";
+    cert_file = "/var/lib/consul/pki/consul2022.crt";
+    key_file = "/var/lib/consul/pki/consul2022.key";
     verify_incoming = true;
     verify_outgoing = true;
     verify_server_hostname = true;
@@ -232,9 +232,9 @@ in
     };
     consul = {
       address = "localhost:8501";
-      ca_file = "/var/lib/nomad/pki/consul2021.crt";
-      cert_file = "/var/lib/nomad/pki/consul2021-client.crt";
-      key_file = "/var/lib/nomad/pki/consul2021-client.key";
+      ca_file = "/var/lib/nomad/pki/consul2022.crt";
+      cert_file = "/var/lib/nomad/pki/consul2022-client.crt";
+      key_file = "/var/lib/nomad/pki/consul2022-client.key";
       ssl = true;
     };
     client = {
@@ -245,8 +245,8 @@ in
       http = true;
       rpc = true;
       ca_file = "/var/lib/nomad/pki/nomad-ca.crt";
-      cert_file = "/var/lib/nomad/pki/nomad2021.crt";
-      key_file = "/var/lib/nomad/pki/nomad2021.key";
+      cert_file = "/var/lib/nomad/pki/nomad2022.crt";
+      key_file = "/var/lib/nomad/pki/nomad2022.key";
       verify_server_hostname = true;
       verify_https_client = true;
     };