diff --git a/pkg/asset/imagebased/configimage/ingressoperatorsigner.go b/pkg/asset/imagebased/configimage/ingressoperatorsigner.go
index 3cca119b3a4..13287dbc4df 100644
--- a/pkg/asset/imagebased/configimage/ingressoperatorsigner.go
+++ b/pkg/asset/imagebased/configimage/ingressoperatorsigner.go
@@ -112,7 +112,7 @@ func selfSignedCertificate(cfg *tls.CertCfg, key *rsa.PrivateKey) (*x509.Certifi
 		IsCA:                  cfg.IsCA,
 		KeyUsage:              cfg.KeyUsages,
 		NotAfter:              time.Now().Add(cfg.Validity),
-		NotBefore:             time.Now(),
+		NotBefore:             time.Now().Add(-24 * time.Hour),
 		SerialNumber:          serial,
 		Subject:               cfg.Subject,
 	}
diff --git a/pkg/asset/tls/tls.go b/pkg/asset/tls/tls.go
index f027bcd7bbe..c266a75aa2a 100644
--- a/pkg/asset/tls/tls.go
+++ b/pkg/asset/tls/tls.go
@@ -64,7 +64,7 @@ func SelfSignedCertificate(cfg *CertCfg, key *rsa.PrivateKey) (*x509.Certificate
 		IsCA:                  cfg.IsCA,
 		KeyUsage:              cfg.KeyUsages,
 		NotAfter:              time.Now().Add(cfg.Validity),
-		NotBefore:             time.Now(),
+		NotBefore:             time.Now().Add(-24 * time.Hour),
 		SerialNumber:          serial,
 		Subject:               cfg.Subject,
 	}