diff --git a/doc/10-icinga-template-library.md b/doc/10-icinga-template-library.md
index 27c263f60da..8d5ddd2fac3 100644
--- a/doc/10-icinga-template-library.md
+++ b/doc/10-icinga-template-library.md
@@ -5758,6 +5758,7 @@ ssl_cert_cipher               | **Optional.** Cipher selection: force {ecdsa,rsa
 ssl_cert_ignore_expiration    | **Optional.** Ignore expiration date.
 ssl_cert_ignore_ocsp          | **Optional.** Do not check revocation with OCSP.
 ssl_cert_ignore_sct           | **Optional.** Do not check for signed certificate timestamps.
+ssl_cert_ignore_tls_renegotiation  | **Optional.** Do not check for renegotiation.
 
 
 #### jmx4perl <a id="plugin-contrib-command-jmx4perl"></a>
diff --git a/itl/plugins-contrib.d/web.conf b/itl/plugins-contrib.d/web.conf
index 15d16e8e458..4a1e0fb3491 100644
--- a/itl/plugins-contrib.d/web.conf
+++ b/itl/plugins-contrib.d/web.conf
@@ -562,6 +562,10 @@ object CheckCommand "ssl_cert" {
 			set_if = "$ssl_cert_ignore_sct$"
 			description = "Do not check for signed certificate timestamps"
 		}
+		"--ignore-tls-renegotiation" = {
+			set_if = "$ssl_cert_ignore_tls_renegotiation$"
+			description = "Do not check for renegotiation"
+		}
 
 	}