diff --git a/lib/krb5/pkinit.c b/lib/krb5/pkinit.c
index 5f15fa04d..9e0049def 100644
--- a/lib/krb5/pkinit.c
+++ b/lib/krb5/pkinit.c
@@ -155,7 +155,7 @@ _krb5_pk_create_sign(krb5_context context,
 				    NULL,
 				    cert,
 				    NULL,
-				    NULL,
+				    id->certs,
 				    sd_data);
     hx509_cert_free(cert);