diff --git a/docs/reference.md b/docs/reference.md
index b9b9010..9ad46fd 100644
--- a/docs/reference.md
+++ b/docs/reference.md
@@ -62,7 +62,7 @@
 | <a name="input_filter_pattern"></a> [filter\_pattern](#input\_filter\_pattern) | Filter pattern for CloudWatch logs subscription filter | `string` | `""` | no |
 | <a name="input_hosted_zone_domain"></a> [hosted\_zone\_domain](#input\_hosted\_zone\_domain) | Hosted zone domain, e.g. dev.ca.example.com | `string` | `""` | no |
 | <a name="input_hosted_zone_id"></a> [hosted\_zone\_id](#input\_hosted\_zone\_id) | Hosted zone ID for public zone, e.g. Z0123456XXXXXXXXXXX | `string` | `""` | no |
-| <a name="input_issuing_ca_info"></a> [issuing\_ca\_info](#input\_issuing\_ca\_info) | Issuing CA certificate information | `map` | <pre>{<br>  "commonName": "Serverless Issuing CA",<br>  "country": "GB",<br>  "emailAddress": null,<br>  "lifetime": 3650,<br>  "locality": "London",<br>  "organization": "Serverless",<br>  "organizationalUnit": "IT",<br>  "pathLengthConstraint": null,<br>  "state": "London"<br>}</pre> | no |
+| <a name="input_issuing_ca_info"></a> [issuing\_ca\_info](#input\_issuing\_ca\_info) | Issuing CA certificate information | `map` | <pre>{<br/>  "commonName": "Serverless Issuing CA",<br/>  "country": "GB",<br/>  "emailAddress": null,<br/>  "lifetime": 3650,<br/>  "locality": "London",<br/>  "organization": "Serverless",<br/>  "organizationalUnit": "IT",<br/>  "pathLengthConstraint": null,<br/>  "state": "London"<br/>}</pre> | no |
 | <a name="input_issuing_ca_key_spec"></a> [issuing\_ca\_key\_spec](#input\_issuing\_ca\_key\_spec) | Issuing CA key specification | `string` | `"ECC_NIST_P256"` | no |
 | <a name="input_issuing_crl_days"></a> [issuing\_crl\_days](#input\_issuing\_crl\_days) | Number of days before Issuing CA CRL expires, in addition to seconds. Must be greater than or equal to Step Function interval | `number` | `1` | no |
 | <a name="input_issuing_crl_seconds"></a> [issuing\_crl\_seconds](#input\_issuing\_crl\_seconds) | Number of seconds before Issuing CA CRL expires, in addition to days. Used for overlap in case of clock skew | `number` | `600` | no |
@@ -72,10 +72,10 @@
 | <a name="input_logging_account_id"></a> [logging\_account\_id](#input\_logging\_account\_id) | AWS Account ID of central logging account for CloudWatch subscription filters | `string` | `""` | no |
 | <a name="input_max_cert_lifetime"></a> [max\_cert\_lifetime](#input\_max\_cert\_lifetime) | Maximum end entity certificate lifetime in days | `number` | `365` | no |
 | <a name="input_memory_size"></a> [memory\_size](#input\_memory\_size) | Standard memory allocation for Lambda functions | `number` | `128` | no |
-| <a name="input_prod_envs"></a> [prod\_envs](#input\_prod\_envs) | List of production environment names, used in outputs.tf | `list` | <pre>[<br>  "prd",<br>  "prod"<br>]</pre> | no |
+| <a name="input_prod_envs"></a> [prod\_envs](#input\_prod\_envs) | List of production environment names, used in outputs.tf | `list` | <pre>[<br/>  "prd",<br/>  "prod"<br/>]</pre> | no |
 | <a name="input_project"></a> [project](#input\_project) | abbreviation for the project, forms first part of resource names | `string` | `"serverless"` | no |
 | <a name="input_public_crl"></a> [public\_crl](#input\_public\_crl) | Whether to make the CRL and CA certificates publicly available | `bool` | `false` | no |
-| <a name="input_root_ca_info"></a> [root\_ca\_info](#input\_root\_ca\_info) | Root CA certificate information | `map` | <pre>{<br>  "commonName": "Serverless Root CA",<br>  "country": "GB",<br>  "emailAddress": null,<br>  "lifetime": 7300,<br>  "locality": "London",<br>  "organization": "Serverless",<br>  "organizationalUnit": "IT",<br>  "pathLengthConstraint": null,<br>  "state": "London"<br>}</pre> | no |
+| <a name="input_root_ca_info"></a> [root\_ca\_info](#input\_root\_ca\_info) | Root CA certificate information | `map` | <pre>{<br/>  "commonName": "Serverless Root CA",<br/>  "country": "GB",<br/>  "emailAddress": null,<br/>  "lifetime": 7300,<br/>  "locality": "London",<br/>  "organization": "Serverless",<br/>  "organizationalUnit": "IT",<br/>  "pathLengthConstraint": null,<br/>  "state": "London"<br/>}</pre> | no |
 | <a name="input_root_ca_key_spec"></a> [root\_ca\_key\_spec](#input\_root\_ca\_key\_spec) | Root CA key specification | `string` | `"ECC_NIST_P384"` | no |
 | <a name="input_root_crl_days"></a> [root\_crl\_days](#input\_root\_crl\_days) | Number of days before Root CA CRL expires, in addition to seconds. Must be greater than or equal to Step Function interval | `number` | `1` | no |
 | <a name="input_root_crl_seconds"></a> [root\_crl\_seconds](#input\_root\_crl\_seconds) | Number of seconds before Root CA CRL expires, in addition to days. Used for overlap in case of clock skew | `number` | `600` | no |