diff --git a/cert-manager/base/cloudflare-clusterissuer.yaml b/cert-manager/base/cloudflare-clusterissuer.yaml
index 3c0451e..a650fd1 100644
--- a/cert-manager/base/cloudflare-clusterissuer.yaml
+++ b/cert-manager/base/cloudflare-clusterissuer.yaml
@@ -17,11 +17,9 @@ spec:
     solvers:
     # An empty 'selector' means that this solver matches all domains
     - selector:
-        dnsNames:
+        dnsZones:
         - 'mziesel.nl'
-        - '*.mziesel.nl'
         - 'mziesel.com'
-        - '*.mziesel.com'
         # - mzsl.nl
         # - *.mzsl.nl
       dns01:
@@ -33,11 +31,9 @@ spec:
             name: cloudflare-api-token-secret
             key: api-token
     - selector:
-        dnsNames:
+        dnsZones:
           - 'm4n5.nl'
-          - '*.m4n5.nl'
           - 'm4n5.online'
-          - '*.m4n5.online'
       http01:
         ingress: {}
         #   ingressClassName: traefik