diff --git a/cmd/controller/app/options/options.go b/cmd/controller/app/options/options.go
index d2810d877..15c4a4f88 100644
--- a/cmd/controller/app/options/options.go
+++ b/cmd/controller/app/options/options.go
@@ -85,7 +85,7 @@ const (
 	defaultTLSACMEIssuerKind           = "Issuer"
 	defaultACMEIssuerChallengeType     = "http01"
 	defaultACMEIssuerDNS01ProviderName = ""
-	defaultEnableCertificateOwnerRef   = true
+	defaultEnableCertificateOwnerRef   = false
 )
 
 var (