diff --git a/CHANGELOG b/CHANGELOG
index e83a25a0d..92cf5b169 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,5 +1,9 @@
 # Nmap Changelog ($Id$); -*-text-*-
 
+o [Ncat] Updated the ca-bundle.crt list of certificate authority
+  certificates. It now has the default list of 11 CAs that come with
+  Windows 7, down from 107 CAs before. [David]
+
 o [Nmap] --exclude and --excludefile now support IPV6 addresses with netmasks 
   [Colin]