diff --git a/pillar/infra/certificates/letsencrypt.yaml b/pillar/infra/certificates/letsencrypt.yaml
index dcc024b..220493a 100644
--- a/pillar/infra/certificates/letsencrypt.yaml
+++ b/pillar/infra/certificates/letsencrypt.yaml
@@ -55,6 +55,18 @@ deadservices.opensuse.org:
     - users.opensuse.org
   targets:
     - macro: atlas
+download.opensuse.org:
+  sans:
+    - codecs.opensuse.org
+    - download-repositories.opensuse.org
+    - download.opensuse.org
+    - downloadcontent.opensuse.org
+    - mirrorcache-eu.opensuse.org
+    - mirrorcache.opensuse.org
+    - tracker.opensuse.org
+    - tumbleweed.opensuse.org
+  targets:
+    - macro: stage
 elections.opensuse.org:
   targets:
     - macro: atlas
diff --git a/pillar/infra/certificates/macros.yaml b/pillar/infra/certificates/macros.yaml
index 3207c5d..b92892f 100644
--- a/pillar/infra/certificates/macros.yaml
+++ b/pillar/infra/certificates/macros.yaml
@@ -22,6 +22,12 @@ provo-proxy:
     - provo-proxy1
   services:
     - haproxy
+stage:
+  hosts:
+    - stage3
+  services:
+    - apache2
+    - nginx
 status:
   hosts:
     - status1