diff --git a/packages/aws-rfdk/lib/core/lib/x509-certificate.ts b/packages/aws-rfdk/lib/core/lib/x509-certificate.ts
index ac7b28b07..5b6481ebb 100644
--- a/packages/aws-rfdk/lib/core/lib/x509-certificate.ts
+++ b/packages/aws-rfdk/lib/core/lib/x509-certificate.ts
@@ -201,7 +201,7 @@ abstract class X509CertificateBase extends Construct {
       runtime: Runtime.NODEJS_12_X,
       layers: [ openSslLayer ],
       handler: props.lambdaHandler,
-      timeout: Duration.seconds(30),
+      timeout: Duration.seconds(90),
       logRetention: RetentionDays.ONE_WEEK,
     });
     this.database.grantReadWriteData(this.lambdaFunc);