diff --git a/inc/vCenter-SSL.ps1 b/inc/vCenter-SSL.ps1
index 84cf43b0..7c1db6e1 100644
--- a/inc/vCenter-SSL.ps1
+++ b/inc/vCenter-SSL.ps1
@@ -136,7 +136,7 @@ if ($paCert) {
         $needNewCert = $true
     } else {
         Write-Log INFO "Skipping issuance — certificate valid >$RenewalWindow days."
-        $needNewCert = $false
+        $needNewCert = $true
     }
 } else {
     Write-Log WARN "No existing cert found — issuance required."  Orange