diff --git a/update-ignore.d/01update-ignore b/update-ignore.d/01update-ignore
index 25fdfac..df8c0df 100755
--- a/update-ignore.d/01update-ignore
+++ b/update-ignore.d/01update-ignore
@@ -144,6 +144,12 @@ writefile () {
 	ignore "#*#"
 	ignore DEADJOE
 
+	comment "ignore certbot/letsencrypt certs"
+	ignore letsencrypt/keys
+	ignore letsencrypt/archive
+	ignore letsencrypt/live
+	ignore letsencrypt/csr
+
 	nl
 	comment "end section $managed_by_etckeeper"
 }