diff --git a/CHANGES b/CHANGES
index 35410b64d1..33934ce489 100644
--- a/CHANGES
+++ b/CHANGES
@@ -483,9 +483,9 @@
 2348.	[func]		Use the EVP interface to OpenSSL. Add PKCS#11 support.
 			Documentation is in the new README.pkcs11 file.
 			New tool, dnssec-keyfromlabel, which takes the
-			label of a key pair in the HSM and constructs a DNS
-			key pair for use by named and dnssec-signzone which
-			uses it.  [RT #16844]
+			label of a key pair in a HSM and constructs a DNS
+			key pair for use by named and dnssec-signzone.
+			[RT #16844]
 
 2347.	[bug]		Delete now traverses the RB tree in the canonical
 			order. [RT #17451]