diff --git a/deploy/cert-manager-webhook-selectel/Chart.yaml b/deploy/cert-manager-webhook-selectel/Chart.yaml
index 331876c..81633a7 100644
--- a/deploy/cert-manager-webhook-selectel/Chart.yaml
+++ b/deploy/cert-manager-webhook-selectel/Chart.yaml
@@ -7,4 +7,4 @@ maintainers:
   - name: andrsp
     email: izotikov@selectel.ru
     url: https://github.com/andrsp
-version: 1.2.3
+version: 1.2.4
diff --git a/deploy/cert-manager-webhook-selectel/templates/pki.yaml b/deploy/cert-manager-webhook-selectel/templates/pki.yaml
index f003678..70f9780 100644
--- a/deploy/cert-manager-webhook-selectel/templates/pki.yaml
+++ b/deploy/cert-manager-webhook-selectel/templates/pki.yaml
@@ -29,7 +29,7 @@ metadata:
     heritage: {{ .Release.Service }}
 spec:
   secretName: {{ include "cert-manager-webhook-selectel.rootCACertificate" . }}
-  duration: 43800h  # 5y
+  duration: 43800h0m0s  # 5y
   issuerRef:
     name: {{ include "cert-manager-webhook-selectel.selfSignedIssuer" . }}
   commonName: "ca.cert-manager-webhook-selectel.cert-manager"
@@ -67,7 +67,7 @@ metadata:
     heritage: {{ .Release.Service }}
 spec:
   secretName: {{ include "cert-manager-webhook-selectel.servingCertificate" . }}
-  duration: 8760h  # 1y
+  duration: 8760h0m0s  # 1y
   issuerRef:
     name: {{ include "cert-manager-webhook-selectel.rootCAIssuer" . }}
   dnsNames: