diff --git a/content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md b/content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
index 38b5eedcf7..5934a48b35 100644
--- a/content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
+++ b/content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
@@ -542,10 +542,10 @@ $ kubectl create -n istio-system secret generic httpbin-credential  \
 1. Instead of creating a `httpbin-credential` secret to hold all the credentials, you can
    create two separate secrets:
 
-   -`httpbin-credential` holds the server's key and certificate
-   -`httpbin-credential-cacert` holds the client's CA certificate and must have the `-cacert` suffix
+    * `httpbin-credential` holds the server's key and certificate
+    * `httpbin-credential-cacert` holds the client's CA certificate and must have the `-cacert` suffix
 
-Create the two separate secrets with the following commands:
+    Create the two separate secrets with the following commands:
 
     {{< text bash >}}
     $ kubectl -n istio-system delete secret httpbin-credential