diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7464524fa..255bae552 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,11 @@
+## Next (Unreleased)
+
+BUG FIXES:
+
+ * secret/pki: Fix regression in 0.11.2+ causing the NotBefore value of
+   generated certificates to be set to the Unix epoch if the role value was not
+   set, instead of using the default of 30 seconds [GH-5481]
+
 ## 0.11.3 (October 8th, 2018)
 
 SECURITY: