diff --git a/src/reverseproxy.js b/src/reverseproxy.js
index 027a42050..15b369255 100644
--- a/src/reverseproxy.js
+++ b/src/reverseproxy.js
@@ -678,7 +678,13 @@ function renewCerts(options, auditSource, progressCallback, callback) {
 
             async.series([
                 (next) => { return renewed.includes(settings.mailFqdn()) ? mail.handleCertChanged(next) : next(); },// mail cert renewed
-                reload // reload nginx if any certs were updated but the config was not rewritten
+                reload, // reload nginx if any certs were updated but the config was not rewritten
+                (next) => { // restart tls apps on cert change
+                    const tlsApps = allApps.filter(app => app.manifest.addons && app.manifest.addons.tls && renewed.includes(app.fqdn));
+                    async.eachSeries(tlsApps, function (app, iteratorDone) {
+                        apps.restart(app, auditSource, () => iteratorDone());
+                    }, next);
+                }
             ], callback);
         });
     });