diff --git a/ChangeLog b/ChangeLog
index 7ab61d3..e8294fd 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,6 +2,11 @@
 
 = mbed TLS 1.3.x
 
+Bugfix
+   * Fix an issue that caused valid certificates being rejected whenever an
+   expired or not yet valid version of the trusted certificate was before the
+   valid version in the trusted certificate list.
+
 Changes
    * Add compile time option for relaxed X509 time verification to enable
      accepting certificates with non-standard time format (that is without