You need to assign one of your certificatesResolvers to the entrypoint or the router, see simple Traefik example.