diff --git a/1.44.0.md b/1.44.0.md
index 20eee96..3427e84 100644
--- a/1.44.0.md
+++ b/1.44.0.md
@@ -8,6 +8,7 @@
 - update to Go 1.20.5
 - remove async support from `portlist` package, please update to use synchronous `Poll()` if this breaks your package
 - `WatchIPNBus` requires only read-only permissions to read
+- base the decision of whether to renew in `tailscale cert` on the lifetime of the certificate, not hard-coded. Better supports 14 day certificate lifetimes.
 
 ### Linux
 - better support SELinux systems using Tailscale SSH