diff --git a/pkg/tls/tls.go b/pkg/tls/tls.go
index 539325e..af17445 100644
--- a/pkg/tls/tls.go
+++ b/pkg/tls/tls.go
@@ -66,6 +66,12 @@ func (cm *CertManager) Ready() bool {
 func (cm *CertManager) Watch(ctx context.Context, log *zap.Logger) error {
 	cm.Log = log
 
+	if err := cm.Load(); err != nil {
+		log.Error("failed to load initial certificate", zap.Error(err))
+
+		return err
+	}
+
 	for {
 		select {
 		case <-time.After(time.Hour):
@@ -74,7 +80,7 @@ func (cm *CertManager) Watch(ctx context.Context, log *zap.Logger) error {
 		}
 
 		if err := cm.Load(); err != nil {
-			log.Error("failed to load new certificate", zap.Error(err))
+			log.Error("failed to reload new certificate", zap.Error(err))
 
 			continue
 		}