Tyk Ingress Controller not respecting TLS certificate

I installed Tyk via official helm chart. Then I created an ingress:

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: demo
  annotations:
    acme.kubernetes.io/enable: "true"
    acme.kubernetes.io/dns: "dns_ali"
    acme.kubernetes.io/add-args: "--keylength ec-256"
    kubernetes.io/ingress.class: "tyk"
spec:
  tls:
  - hosts:
    - api.domain.com
    secretName:api-ingress-tls
  rules:
  - host: api.domain.com
    http:
      paths:
      - path: /entity/
        backend:
          serviceName: DemoService
          servicePort: 80

Now I can see this API in the dashboard, but the certificate is not shown. And if I visit the domain, Tyk will serve using an invalid certificate. I’m sure the TLS Secret exists and valid. How to solve this problem?