diff --git a/.golangci.ci.yaml b/.golangci.ci.yaml
index 5de8e6103..e11374a7c 100644
--- a/.golangci.ci.yaml
+++ b/.golangci.ci.yaml
@@ -27,4 +27,4 @@ issues:
   exclude-rules:
     - linters:
         - gosec
-      text: "G(101|107|204|306|402|404|501)"
+      text: "G(101|107|204|306|402|404)"
diff --git a/pkg/issuer/acme/dns/rfc2136/tsig.go b/pkg/issuer/acme/dns/rfc2136/tsig.go
index 890553e2c..152e42232 100644
--- a/pkg/issuer/acme/dns/rfc2136/tsig.go
+++ b/pkg/issuer/acme/dns/rfc2136/tsig.go
@@ -21,7 +21,7 @@ package rfc2136
 
 import (
 	"crypto/hmac"
-	"crypto/md5"
+	"crypto/md5"  // #nosec G501 -- MD5 is a supported TSIG Algorithm
 	"crypto/sha1" // #nosec G505 -- SHA1 is a supported TSIG Algorithm
 	"crypto/sha256"
 	"crypto/sha512"
diff --git a/pkg/issuer/acme/dns/rfc2136/tsig_test.go b/pkg/issuer/acme/dns/rfc2136/tsig_test.go
index 8af52f68b..5cb723e60 100644
--- a/pkg/issuer/acme/dns/rfc2136/tsig_test.go
+++ b/pkg/issuer/acme/dns/rfc2136/tsig_test.go
@@ -21,7 +21,7 @@ package rfc2136
 
 import (
 	"crypto/hmac"
-	"crypto/md5"
+	"crypto/md5"  // #nosec G501 -- MD5 is a supported TSIG Algorithm
 	"crypto/sha1" // #nosec G505 -- SHA1 is a supported TSIG Algorithm
 	"crypto/sha256"
 	"crypto/sha512"