diff --git a/backend/src/ee/services/pki-acme/pki-acme-service.ts b/backend/src/ee/services/pki-acme/pki-acme-service.ts
index 0f4c081b0..7cc9ae6f1 100644
--- a/backend/src/ee/services/pki-acme/pki-acme-service.ts
+++ b/backend/src/ee/services/pki-acme/pki-acme-service.ts
@@ -724,6 +724,8 @@ export const pkiAcmeServiceFactory = ({
               return { certificateId: result.certificateId };
             } else {
               const { certificateAuthority } = (await certificateProfileDAL.findByIdWithConfigs(profileId, tx))!;
+              // TODO: this is pretty slow, and we are holding the transaction open for a long time,
+              //       we should queue the certificate issuance to a background job instead
               const cert = await orderCertificate(
                 {
                   caId: certificateAuthority.id,