diff --git a/libratbox/src/openssl.c b/libratbox/src/openssl.c
index 9ddc356d7..81a8d17fa 100644
--- a/libratbox/src/openssl.c
+++ b/libratbox/src/openssl.c
@@ -633,6 +633,7 @@ rb_get_ssl_certfp(rb_fde_t *F, uint8_t certfp[RB_SSL_CERTFP_LEN])
 			memcpy(certfp, cert->sha1_hash, RB_SSL_CERTFP_LEN);
 			return 1;
 		}
+		X509_free(cert);
 	}
 
 	return 0;