diff --git a/data/nginx/default.conf.template b/data/nginx/default.conf.template
index 003e62e..2e8a1b5 100644
--- a/data/nginx/default.conf.template
+++ b/data/nginx/default.conf.template
@@ -50,8 +50,8 @@ server {
 	listen [::]:${NGINX_HTTPS_PORT} ssl http2;
 	server_name ${NGINX_SERVERNAME};
 
-	ssl_certificate /etc/nginx/ssl/certs/sso-base23-de-fullchain-cert.pem;
-	ssl_certificate_key /etc/nginx/ssl/certs/sso-base23-de-fullchain-key.pem;
+	ssl_certificate /etc/nginx/ssl/certs/sso.base23.de.crt;
+	ssl_certificate_key /etc/nginx/ssl/certs/sso.base23.de.key;
 	ssl_session_timeout ${NGINX_SSL_SESSION_TIMEOUT};
 	ssl_session_cache ${NGINX_SSL_SESSION_CACHE};
 
@@ -70,7 +70,7 @@ server {
 	ssl_stapling_verify ${NGINX_SSL_STAPLING_VERIFY};
 
 	# verify chain of trust of OCSP response using Root CA and Intermediate certs
-	ssl_trusted_certificate /etc/nginx/ssl/certs/sso-base23-de-trustchain.pem;
+	ssl_trusted_certificate /etc/nginx/ssl/certs/sso.base23.de.issuer.crt;
 
 	# replace with the IP address of your resolver
 	resolver ${NGINX_RESOLVER};