diff --git a/external-tls.md b/external-tls.md
index f08f96e..2603edc 100644
--- a/external-tls.md
+++ b/external-tls.md
@@ -30,7 +30,7 @@ Keys are **ECDSA** (`--key-type ecdsa`), matching the rest of the fleet.
 
 ```sh
 sudo certbot certonly \
-    -m ops@zap.pics --agree-tos --no-eff-email --noninteractive \
+    -m ops@<domain> --agree-tos --no-eff-email --noninteractive \
     --cert-name <domain> \
     --key-type ecdsa \
     --dns-cloudflare \