diff --git a/CHANGELOG.md b/CHANGELOG.md
index 890631f6..ef53b579 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -22,6 +22,7 @@ The **patch** part changes incrementally at each release.
 * mysql: script "mysql-queries-killer.sh" to kill MySQL queries
 * nagios-nrpe + evolinux-users: new checks for bkctld
 * redis: instance service for Debian 11
+* squid: add *.o.lencr.org to default whitelist
 
 ### Changed
 
diff --git a/squid/files/evolinux-whitelist-defaults.conf b/squid/files/evolinux-whitelist-defaults.conf
index fea90344..fe3ff500 100644
--- a/squid/files/evolinux-whitelist-defaults.conf
+++ b/squid/files/evolinux-whitelist-defaults.conf
@@ -14,6 +14,7 @@
 
 # Let's Encrypt
 .+\.letsencrypt.org$
+.+\.o\.lencr.org$
 
 # Other OCSP endpoint
 ^ocsp\.usertrust\.com$