diff --git a/src/reverseproxy.js b/src/reverseproxy.js
index 53b1eab92..57469bd79 100644
--- a/src/reverseproxy.js
+++ b/src/reverseproxy.js
@@ -369,10 +369,14 @@ function ensureCertificate(vhost, domain, auditSource, callback) {
                     notifyCertChanged(vhost, function (error) {
                         if (error) return callback(error);
 
-                        // if no cert was returned use fallback. the fallback/caas provider will not provide any for example
-                        if (!certFilePath || !keyFilePath) return getFallbackCertificate(domain, callback);
+                        if (certFilePath && keyFilePath) callback(null, { certFilePath, keyFilePath }, { renewed: true });
 
-                        callback(null, { certFilePath, keyFilePath }, { renewed: true });
+                        // if no cert was returned use fallback. the fallback/caas provider will not provide any for example
+                        getFallbackCertificate(domain, function (error, bundle) {
+                            if (error) return callback(error);
+
+                            callback(null, bundle, { renewed: false });
+                        });
                     });
                 });
             });