diff --git a/roles/base/defaults/main.yml b/roles/base/defaults/main.yml
index d2a1ebc..3359a38 100644
--- a/roles/base/defaults/main.yml
+++ b/roles/base/defaults/main.yml
@@ -23,12 +23,6 @@ base_core_install_updates: true
 # Defines the hostname to be forced on the host but is ignored if undefined
 base_core_hostname: ""
 
-# Time Sync
-# ========
-
-# Defines the timezone to apply to the client
-base_core_timezone: "America/Boise"
-
 # MOTD
 # ====
 
@@ -38,6 +32,18 @@ base_core_motd_enabled: true
 # Banner to add to MOTD
 base_core_motd_banner: ""
 
+# Root CA
+# =======
+
+# Defines the basename to use for the Root CA
+base_core_root_ca_basename: ""
+
+# Converts the defined certificate from DER to PEM type
+base_core_root_ca_convert: false
+
+# URL to download the Root CA
+base_core_root_ca_url: ""
+
 # SSH
 # ===
 
@@ -53,17 +59,12 @@ base_core_ssh_permit_password_authentication: false
 # Common name for self signed cert, use hostname as a default
 base_core_cert_common_name: "{{ ansible_facts['nodename'] }}"
 
-# Root CA
-# =======
+# Time Sync
+# ========
 
-# Defines the basename to use for the Root CA
-base_core_root_ca_basename: ""
+# Defines the timezone to apply to the client
+base_core_timezone: "America/Boise"
 
-# Converts the defined certificate from DER to PEM type
-base_core_root_ca_convert: false
-
-# URL to download the Root CA
-base_core_root_ca_url: ""
 
 # Web Management
 # ==============