diff --git a/certbot/CHANGELOG.md b/certbot/CHANGELOG.md
index cb1f2968c..868f3c8be 100644
--- a/certbot/CHANGELOG.md
+++ b/certbot/CHANGELOG.md
@@ -26,6 +26,7 @@ More details about these changes can be found on our GitHub repo.
   determine the OCSP status of certificates.
 * Don't verify the existing certificate in HTTP01Response.simple_verify, for 
   compatibility with the real-world ACME challenge checks.
+* Added support for `$hostname` in nginx `server_name` directive
 
 ### Changed
 
@@ -37,7 +38,7 @@ More details about these changes can be found on our GitHub repo.
 
 ### Fixed
 
-*
+* Fix Apache plugin to use less restrictive umask for making the challenge directory when a restrictive umask was set when certbot was started.
 
 More details about these changes can be found on our GitHub repo.
 
@@ -46,7 +47,6 @@ More details about these changes can be found on our GitHub repo.
 ### Added
 
 * Added support for Cloudflare's limited-scope API Tokens
-* Added support for `$hostname` in nginx `server_name` directive
 
 ### Changed
 
@@ -59,7 +59,6 @@ More details about these changes can be found on our GitHub repo.
 ### Fixed
 
 * Fix collections.abc imports for Python 3.9.
-* Fix Apache plugin to use less restrictive umask for making the challenge directory when a restrictive umask was set when certbot was started.
 
 More details about these changes can be found on our GitHub repo.