diff --git a/ChangeLog b/ChangeLog
index 568fba1469..5c2bf4c6e1 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -52,6 +52,9 @@ Bugfix
    * Fixed the sample applications gen_key.c, cert_req.c and cert_write.c for
      builds where the configuration POLARSSL_PEM_WRITE_C is not defined. Found
      by inestlerode. #559.
+   * Fix an issue that caused valid certificates being rejected whenever an
+   expired or not yet valid version of the trusted certificate was before the
+   valid version in the trusted certificate list.
 
 = mbed TLS 1.3.17 branch 2016-06-28