diff --git a/lib/hx509/cms.c b/lib/hx509/cms.c
index 5885f1eb1..a7f75d1f8 100644
--- a/lib/hx509/cms.c
+++ b/lib/hx509/cms.c
@@ -322,7 +322,7 @@ hx509_cms_envelope_1(hx509_context context,
     if (encryption_type == NULL)
 	encryption_type = oid_id_aes_256_cbc();
 
-    ret = _hx509_check_key_usage(cert, 1 << 2, TRUE);
+    ret = _hx509_check_key_usage(context, cert, 1 << 2, TRUE);
     if (ret)
 	goto out;
 
diff --git a/lib/hx509/revoke.c b/lib/hx509/revoke.c
index f7eb5d5a6..6ea60249f 100644
--- a/lib/hx509/revoke.c
+++ b/lib/hx509/revoke.c
@@ -402,7 +402,7 @@ verify_crl(hx509_context context,
 	if (ret)
 	    goto out;
 
-	ret = _hx509_check_key_usage(signer, 1 << 6, TRUE); /* crl */
+	ret = _hx509_check_key_usage(context, signer, 1 << 6, TRUE); /* crl */
 	if (ret != 0)
 	    goto out;
     }