diff --git a/tools/debian/install.sh b/tools/debian/install.sh
index 902b9ab..cef1f21 100755
--- a/tools/debian/install.sh
+++ b/tools/debian/install.sh
@@ -67,9 +67,7 @@ cp geminilogs /etc/logrotate.d/
 echo "setting up content files..."
 mkdir -p /srv/gemini/content
 mkdir -p /srv/gemini/.certificates
-openssl req -x509 -newkey rsa:4096 -keyout /srv/gemini/.certificates/key.rsa \
-	-out /srv/gemini/.certificates/cert.pem -days 3650 -nodes \
-	-subj "/CN=$(uname -n)" -addext "subjectAltName = DNS:$(uname -n)"
+# agate will generate certificates on first run
 
 echo "starting service..."
 systemctl daemon-reload