diff --git a/CHANGES.d/20240812_122949_sweh_sweh_certificate_acl.md b/CHANGES.d/20240812_122949_sweh_sweh_certificate_acl.md
new file mode 100644
index 0000000..a7e30c0
--- /dev/null
+++ b/CHANGES.d/20240812_122949_sweh_sweh_certificate_acl.md
@@ -0,0 +1 @@
+- Set correct acl for `ssl.Certificates` on certificate renew.