diff --git a/pkg/issuer/acme/dns/rfc2136/tsig.go b/pkg/issuer/acme/dns/rfc2136/tsig.go
index 890553e2c..152e42232 100644
--- a/pkg/issuer/acme/dns/rfc2136/tsig.go
+++ b/pkg/issuer/acme/dns/rfc2136/tsig.go
@@ -21,7 +21,7 @@ package rfc2136
 
 import (
 	"crypto/hmac"
-	"crypto/md5"
+	"crypto/md5"  // #nosec G501 -- MD5 is a supported TSIG Algorithm
 	"crypto/sha1" // #nosec G505 -- SHA1 is a supported TSIG Algorithm
 	"crypto/sha256"
 	"crypto/sha512"
diff --git a/pkg/issuer/acme/dns/rfc2136/tsig_test.go b/pkg/issuer/acme/dns/rfc2136/tsig_test.go
index 8af52f68b..5cb723e60 100644
--- a/pkg/issuer/acme/dns/rfc2136/tsig_test.go
+++ b/pkg/issuer/acme/dns/rfc2136/tsig_test.go
@@ -21,7 +21,7 @@ package rfc2136
 
 import (
 	"crypto/hmac"
-	"crypto/md5"
+	"crypto/md5"  // #nosec G501 -- MD5 is a supported TSIG Algorithm
 	"crypto/sha1" // #nosec G505 -- SHA1 is a supported TSIG Algorithm
 	"crypto/sha256"
 	"crypto/sha512"