diff --git a/docs/_releasenotes/1605.fix.load-signed-intermediates b/docs/_releasenotes/1605.fix.load-signed-intermediates
new file mode 100644
index 0000000000000000000000000000000000000000..fa65ab4128e2694cbc7239dda36ca9a1db26c86b
--- /dev/null
+++ b/docs/_releasenotes/1605.fix.load-signed-intermediates
@@ -0,0 +1 @@
+Fix load-signed-intermediates.sh script, which was accidentally broken during the implementation of root CA rotation support.
diff --git a/tools/vault/load-signed-intermediates.sh b/tools/vault/load-signed-intermediates.sh
index f0bd79eeb81959ceedb382a4013dc01fe223889d..0f9562306797ea3c95a617f839ce3d6a45ee2582 100755
--- a/tools/vault/load-signed-intermediates.sh
+++ b/tools/vault/load-signed-intermediates.sh
@@ -20,6 +20,6 @@ cluster="$(get_clustername)"
 # shellcheck source=tools/vault/lib.sh
 . "$(dirname "$0")/lib.sh"
 
-import_cert k8s-cluster.fullchain.pem "$k8s_pki_path"
-import_cert k8s-front-proxy.fullchain.pem "$k8s_front_proxy_pki_path"
-import_cert k8s-etcd.fullchain.pem "$etcd_pki_path"
+import_cert k8s-cluster.fullchain.pem "$k8s_pki_path" "current"
+import_cert k8s-front-proxy.fullchain.pem "$k8s_front_proxy_pki_path" "current"
+import_cert k8s-etcd.fullchain.pem "$etcd_pki_path" "current"