diff --git a/CHANGELOG.md b/CHANGELOG.md
index 225ed66ab..11987f66c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -77,10 +77,12 @@ IMPROVEMENTS:
    [GH-2141]
  * secret/pki: O (Organization) values can now be set to role-defined values
    for issued/signed certificates [GH-2369]
- * secret/pki: Certificates issued/signed from PKI backend does not generate
+ * secret/pki: Certificates issued/signed from PKI backend do not generate
    leases by default [GH-2403]
  * secret/pki: When using DER format, still return the private key type
    [GH-2405]
+ * secret/pki: Add an intermediate to the CA chain even if it lacks an
+   authority key ID [GH-2465]
  * secret/ssh: SSH backend as CA to sign user and host certificates [GH-2208]
  * secret/ssh: Support reading of SSH CA public key from `config/ca` endpoint
    and also return it when CA key pair is generated [GH-2483]