diff --git a/lib/hx509/keyset.c b/lib/hx509/keyset.c
index 80b614e8a..f89dfbef3 100644
--- a/lib/hx509/keyset.c
+++ b/lib/hx509/keyset.c
@@ -125,6 +125,9 @@ hx509_certs_init(hx509_context context,
 
     *certs = NULL;
 
+    if (name == NULL)
+        name = "";
+
     residue = strchr(name, ':');
     if (residue) {
 	type = malloc(residue - name + 1);