diff --git a/examples/full-cluster-tf-upgrade/1.28/common-services/cert-manager-issuer.tf b/examples/full-cluster-tf-upgrade/1.28/common-services/cert-manager-issuer.tf
new file mode 100644
index 0000000..65d1abd
--- /dev/null
+++ b/examples/full-cluster-tf-upgrade/1.28/common-services/cert-manager-issuer.tf
@@ -0,0 +1,14 @@
+module "subordinate_ca" {
+  source = "git@github.e.it.census.gov:terraform-modules/aws-certificates//acmpca-eks-cert-manager"
+
+  cluster_name  = var.cluster_name
+  contact_email = var.contact_email
+
+  tags = merge(
+    local.base_tags,
+    local.common_tags,
+    var.account_tags,
+    var.infrastructure_tags,
+    var.application_tags,
+  )
+}