diff --git a/doc/man1/s_server.pod b/doc/man1/s_server.pod
index c16b5624651c76603b8974754d32007b12167324..b34dadd650efd1698e7f883ba3e3bf7ff838b5f2 100644
--- a/doc/man1/s_server.pod
+++ b/doc/man1/s_server.pod
@@ -529,6 +529,11 @@ The list should contain most wanted protocols first.
 Protocol names are printable ASCII strings, for example "http/1.1" or
 "spdy/3".
 
+=item B<-keylogfile path>
+
+Appends TLS secrets to the specified keylog file such that external programs
+(like Wireshark) can decrypt TLS connections.
+
 =item B<-max_early_data arg>
 
 Change the default maximum early data bytes that are specified for new sessions
@@ -578,11 +583,6 @@ cause the client to disconnect due to a protocol violation.
 
 print out some session cache status information.
 
-=item B<-keylogfile path>
-
-Appends TLS secrets to the specified keylog file such that external programs
-(like Wireshark) can decrypt TLS connections.
-
 =back
 
 =head1 NOTES