diff --git a/third_party/cert-manager-latest/net-certmanager.yaml b/third_party/cert-manager-latest/net-certmanager.yaml
index 598c6f0b3ebf..54a7f5284564 100644
--- a/third_party/cert-manager-latest/net-certmanager.yaml
+++ b/third_party/cert-manager-latest/net-certmanager.yaml
@@ -19,7 +19,7 @@ metadata:
   name: knative-serving-certmanager
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "20240304-ee3448c8"
+    app.kubernetes.io/version: "20240305-6da6ec62"
     app.kubernetes.io/name: knative-serving
     serving.knative.dev/controller: "true"
     networking.knative.dev/certificate-provider: cert-manager
@@ -52,7 +52,7 @@ metadata:
   name: config.webhook.net-certmanager.networking.internal.knative.dev
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "20240304-ee3448c8"
+    app.kubernetes.io/version: "20240305-6da6ec62"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
 webhooks:
@@ -93,7 +93,7 @@ metadata:
   namespace: knative-serving
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "20240304-ee3448c8"
+    app.kubernetes.io/version: "20240305-6da6ec62"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
 
@@ -119,7 +119,7 @@ metadata:
   namespace: knative-serving
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "20240304-ee3448c8"
+    app.kubernetes.io/version: "20240305-6da6ec62"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
 data:
@@ -187,7 +187,7 @@ metadata:
   namespace: knative-serving
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "20240304-ee3448c8"
+    app.kubernetes.io/version: "20240305-6da6ec62"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
 spec:
@@ -199,7 +199,7 @@ spec:
       labels:
         app: net-certmanager-controller
         app.kubernetes.io/component: net-certmanager
-        app.kubernetes.io/version: "20240304-ee3448c8"
+        app.kubernetes.io/version: "20240305-6da6ec62"
         app.kubernetes.io/name: knative-serving
     spec:
       serviceAccountName: controller
@@ -207,7 +207,7 @@ spec:
         - name: controller
           # This is the Go import path for the binary that is containerized
           # and substituted here.
-          image: gcr.io/knative-nightly/knative.dev/net-certmanager/cmd/controller@sha256:eaa731b872d576d8d923700a9eb47c7a3f0cfa1ea8dc4f8ee6c096186e290788
+          image: gcr.io/knative-nightly/knative.dev/net-certmanager/cmd/controller@sha256:1659d4d87d99b5ef148fd305d3ed4b9e0dd2512ee456dbe0e814e5cf3a05a008
           resources:
             requests:
               cpu: 30m
@@ -248,7 +248,7 @@ metadata:
   labels:
     app: net-certmanager-controller
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "20240304-ee3448c8"
+    app.kubernetes.io/version: "20240305-6da6ec62"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
   name: net-certmanager-controller
@@ -286,7 +286,7 @@ metadata:
   name: selfsigned-cluster-issuer
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "20240304-ee3448c8"
+    app.kubernetes.io/version: "20240305-6da6ec62"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
     knative.dev/issuer-install: "true"
@@ -299,7 +299,7 @@ metadata:
   name: knative-selfsigned-issuer
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "20240304-ee3448c8"
+    app.kubernetes.io/version: "20240305-6da6ec62"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
     knative.dev/issuer-install: "true"
@@ -314,7 +314,7 @@ metadata:
   namespace: cert-manager #  If you want to use it as a ClusterIssuer the secret must be in the cert-manager namespace.
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "20240304-ee3448c8"
+    app.kubernetes.io/version: "20240305-6da6ec62"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
     knative.dev/issuer-install: "true"
@@ -350,7 +350,7 @@ metadata:
   namespace: knative-serving
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "20240304-ee3448c8"
+    app.kubernetes.io/version: "20240305-6da6ec62"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
 spec:
@@ -363,7 +363,7 @@ spec:
       labels:
         app: net-certmanager-webhook
         app.kubernetes.io/component: net-certmanager
-        app.kubernetes.io/version: "20240304-ee3448c8"
+        app.kubernetes.io/version: "20240305-6da6ec62"
         app.kubernetes.io/name: knative-serving
         role: net-certmanager-webhook
     spec:
@@ -372,7 +372,7 @@ spec:
         - name: webhook
           # This is the Go import path for the binary that is containerized
           # and substituted here.
-          image: gcr.io/knative-nightly/knative.dev/net-certmanager/cmd/webhook@sha256:387a43d7352003a8e8ea04f681243d5c31756f478c93cd392426a429a884c5e2
+          image: gcr.io/knative-nightly/knative.dev/net-certmanager/cmd/webhook@sha256:082d0d7051ff2e7210bb51774277b957ddde8a493f3dcace92c7261c6d2ba615
           resources:
             requests:
               cpu: 20m
@@ -438,7 +438,7 @@ metadata:
   labels:
     role: net-certmanager-webhook
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "20240304-ee3448c8"
+    app.kubernetes.io/version: "20240305-6da6ec62"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
 spec: