diff --git a/main.tf b/main.tf
index 89b7fb6..de13eac 100644
--- a/main.tf
+++ b/main.tf
@@ -3,7 +3,7 @@ resource "aws_acm_certificate" "this" {
   subject_alternative_names = setsubtract(keys(var.domain_names_to_zone_ids), [var.primary_domain_name])
   validation_method         = "DNS"
 
-  tags = var.default_tags
+  tags = merge(var.default_tags, var.acm_certificate_tags)
 
   lifecycle {
     create_before_destroy = true
diff --git a/variables.tf b/variables.tf
index 84c940a..9673d87 100644
--- a/variables.tf
+++ b/variables.tf
@@ -1,3 +1,12 @@
+variable "acm_certificate_tags" {
+  type    = map(string)
+  default = {}
+
+  description = <<EOS
+Map of tags assigned to the ACM certificate created by this module. Tags in this map will override tags in `var.default_tags`.
+EOS
+}
+
 variable "default_tags" {
   type    = map(string)
   default = {}