diff --git a/keps/sig-auth/3257-cluster-trust-bundles/README.md b/keps/sig-auth/3257-cluster-trust-bundles/README.md
index 964c5da3291c..664bd3ad7762 100644
--- a/keps/sig-auth/3257-cluster-trust-bundles/README.md
+++ b/keps/sig-auth/3257-cluster-trust-bundles/README.md
@@ -290,7 +290,7 @@ kind: ClusterTrustBundle
 metadata:
   name: example.com:server-tls:foo
   labels:
-    k8s.example/cluster-trust-bundle-version: live
+    example.com/cluster-trust-bundle-version: live
 spec:
   signerName: example.com/server-tls
   trustBundle: "<... PEM DATA ...>"
@@ -321,7 +321,7 @@ spec:
 +      - clusterTrustBundle:
 +          signerName: example.com/server-tls
 +          labelSelector:
-+            k8s.example/cluster-trust-bundle-version: live
++            example.com/cluster-trust-bundle-version: live
 +          path: ca_certificates.pem
 ```