diff --git a/lib/krb5/context.c b/lib/krb5/context.c
index dff7a700c..f530350f2 100644
--- a/lib/krb5/context.c
+++ b/lib/krb5/context.c
@@ -535,7 +535,8 @@ krb5_free_context(krb5_context context)
     krb5_set_send_to_kdc_func(context, NULL, NULL);
 
 #ifdef PKINIT
-    hx509_context_free(&context->hx509ctx);
+    if (context->hx509ctx)
+	hx509_context_free(&context->hx509ctx);
 #endif
 
     HEIMDAL_MUTEX_destroy(context->mutex);