diff --git a/deploy/crds/README.md b/deploy/crds/README.md
index 2368af705..e9e7f7676 100644
--- a/deploy/crds/README.md
+++ b/deploy/crds/README.md
@@ -11,7 +11,7 @@ This package exposes a number of different Bazel targets:
 * `templates.regular`: the Helm templates for the 'regular' CRD manifests
 * `templates.legacy`: the Helm templates for the 'legacy' CRD manifests
 * `crds.regular`: the templated 'regular' CRD manifests (after running `helm template`)
-* `crds.legacy`: the templated 'regular' CRD manifests (after running `helm template`)
+* `crds.legacy`: the templated 'legacy' CRD manifests (after running `helm template`)
 * `crd-<crd-name>.templated`: for each CRD type, the one CRD after running `helm template`
 * `templated_files`: a filegroup containing all of the individual templated CRD files
 
diff --git a/deploy/crds/crd-certificates.yaml b/deploy/crds/crd-certificates.yaml
index b717251b6..5d2d44655 100644
--- a/deploy/crds/crd-certificates.yaml
+++ b/deploy/crds/crd-certificates.yaml
@@ -3,7 +3,7 @@ kind: CustomResourceDefinition
 metadata:
   name: certificates.cert-manager.io
   annotations:
-    "cert-manager.io/inject-ca-from-secret": '{{ template "webhook.caRef" . }}'
+    cert-manager.io/inject-ca-from-secret: '{{ template "webhook.caRef" . }}'
   labels:
     app: '{{ template "cert-manager.name" . }}'
     app.kubernetes.io/name: '{{ template "cert-manager.name" . }}'
diff --git a/deploy/crds/crd-challenges.yaml b/deploy/crds/crd-challenges.yaml
index bd134dd81..d6f6bb9bd 100644
--- a/deploy/crds/crd-challenges.yaml
+++ b/deploy/crds/crd-challenges.yaml
@@ -3,7 +3,7 @@ kind: CustomResourceDefinition
 metadata:
   name: challenges.acme.cert-manager.io
   annotations:
-    "cert-manager.io/inject-ca-from-secret": '{{ template "webhook.caRef" . }}'
+    cert-manager.io/inject-ca-from-secret: '{{ template "webhook.caRef" . }}'
   labels:
     app: '{{ template "cert-manager.name" . }}'
     app.kubernetes.io/name: '{{ template "cert-manager.name" . }}'
diff --git a/deploy/crds/crd-issuers.yaml b/deploy/crds/crd-issuers.yaml
index 702dc80ec..7667fb11c 100644
--- a/deploy/crds/crd-issuers.yaml
+++ b/deploy/crds/crd-issuers.yaml
@@ -3,7 +3,7 @@ kind: CustomResourceDefinition
 metadata:
   name: issuers.cert-manager.io
   annotations:
-    "cert-manager.io/inject-ca-from-secret": '{{ template "webhook.caRef" . }}'
+    cert-manager.io/inject-ca-from-secret: '{{ template "webhook.caRef" . }}'
   labels:
     app: '{{ template "cert-manager.name" . }}'
     app.kubernetes.io/name: '{{ template "cert-manager.name" . }}'
diff --git a/deploy/crds/crd-orders.yaml b/deploy/crds/crd-orders.yaml
index 00b3c9826..ef7f631c7 100644
--- a/deploy/crds/crd-orders.yaml
+++ b/deploy/crds/crd-orders.yaml
@@ -3,7 +3,7 @@ kind: CustomResourceDefinition
 metadata:
   name: orders.acme.cert-manager.io
   annotations:
-    "cert-manager.io/inject-ca-from-secret": '{{ template "webhook.caRef" . }}'
+    cert-manager.io/inject-ca-from-secret: '{{ template "webhook.caRef" . }}'
   labels:
     app: '{{ template "cert-manager.name" . }}'
     app.kubernetes.io/name: '{{ template "cert-manager.name" . }}'