diff --git a/sdk/keyvault/Azure.Security.KeyVault.Certificates/src/CertificatePolicy.cs b/sdk/keyvault/Azure.Security.KeyVault.Certificates/src/CertificatePolicy.cs
index 3ef19c6229924..c589f5684204b 100644
--- a/sdk/keyvault/Azure.Security.KeyVault.Certificates/src/CertificatePolicy.cs
+++ b/sdk/keyvault/Azure.Security.KeyVault.Certificates/src/CertificatePolicy.cs
@@ -122,8 +122,9 @@ internal CertificatePolicy()
         }
 
         /// <summary>
-        /// Gets a new <see cref="CertificatePolicy"/> suitable for self-signed certificate requests.
-        /// You should change the <see cref="Subject"/> before passing this policy to create a certificate.
+        /// Gets a new <see cref="CertificatePolicy"/> suitable for self-signed certificate requests
+        /// with the <see cref="Subject"/> "CN=DefaultPolicy". To change the Subject, create a new instance
+        /// using one of the constructors.
         /// </summary>
         public static CertificatePolicy Default => new CertificatePolicy(DefaultIssuerName, DefaultSubject);