diff --git a/lib/hx509/hxtool.c b/lib/hx509/hxtool.c
index 70e152b46..e27a9ec10 100644
--- a/lib/hx509/hxtool.c
+++ b/lib/hx509/hxtool.c
@@ -1829,15 +1829,15 @@ crl_sign(struct crl_sign_options *opt, int argc, char **argv)
 
     hx509_crl_sign(context, signer, crl, &os);
 
-    hx509_crl_free(context, crl);
-
-    hx509_cert_free(signer);
-
     if (opt->crl_file_string)
 	rk_dumpdata(opt->crl_file_string, os.data, os.length);
 
     free(os.data);
 
+    hx509_crl_free(context, crl);
+    hx509_cert_free(signer);
+    hx509_lock_free(lock);
+
     return 0;
 }