diff --git a/modules/ROOT/partials/release-notes/release-25.3.adoc b/modules/ROOT/partials/release-notes/release-25.3.adoc
index d6ef0fb44..de584c6c8 100644
--- a/modules/ROOT/partials/release-notes/release-25.3.adoc
+++ b/modules/ROOT/partials/release-notes/release-25.3.adoc
@@ -107,6 +107,9 @@ See https://github.com/stackabletech/hive-operator/pull/578[hive-operator#578].
 * Previously, pods with a Listener volume were stuck in an "Unknown" state after their node was restarted.
   With this release, Listener volumes are correctly republished and the pods restart as expected.
   See https://github.com/stackabletech/listener-operator/issues/262[listener-operator#262].
+* Previously, TLS certificates generated by the secret operator referenced a wrong issuer if the secret operator used an intermediate CA.
+  With this release, the issuer of the generated TLS certificate is correct and using an intermediate CA in the secret operator works as expected.
+  See https://github.com/stackabletech/secret-operator/pull/566[secret-operator#566].
 * In 24.11 we used a custom build of jmx_exporter to resolve a https://github.com/stackabletech/issues/issues/649[performance degradation].
   In this release, Java products ship with the fixed upstream https://github.com/prometheus/jmx_exporter/releases/tag/1.1.0[jmx_exporter 1.1.0] which includes https://github.com/prometheus/jmx_exporter/pull/1009[the fix].