diff --git a/kdc/pkinit.c b/kdc/pkinit.c
index 0d9405481..2f1e2d820 100644
--- a/kdc/pkinit.c
+++ b/kdc/pkinit.c
@@ -467,7 +467,7 @@ _kdc_pk_rd_padata(krb5_context context,
 						   edi->val[i].issuerAndSerialNumber->length,
 						   &iasn,
 						   &size);
-		if (ret || size != 0) {
+		if (ret) {
 		    hx509_query_free(kdc_identity->hx509ctx, q);
 		    continue;
 		}