diff --git a/lib/hx509/hxtool.c b/lib/hx509/hxtool.c
index 255cc1a55..fb23d1f0f 100644
--- a/lib/hx509/hxtool.c
+++ b/lib/hx509/hxtool.c
@@ -228,6 +228,7 @@ cms_create_sd(struct cms_create_sd_options *opt, int argc, char **argv)
 
     hx509_certs_free(&anchors);
     hx509_certs_free(&pool);
+    hx509_certs_free(&store);
     _hx509_unmap_file(p, sz);
     hx509_lock_free(lock);