diff --git a/kdc/pkinit.c b/kdc/pkinit.c
index f98a49cf4..3c0c33418 100644
--- a/kdc/pkinit.c
+++ b/kdc/pkinit.c
@@ -752,6 +752,7 @@ pk_mk_pa_reply_enckey(krb5_context context,
 					buf.length,
 					NULL,
 					cert,
+					NULL,
 					kdc_identity->anchors,
 					kdc_identity->certpool,
 					&signed_data);
@@ -864,6 +865,7 @@ pk_mk_pa_reply_dh(krb5_context context,
 					buf.length,
 					NULL,
 					cert,
+					NULL,
 					kdc_identity->anchors,
 					kdc_identity->certpool,
 					&signed_data);
diff --git a/lib/hx509/hxtool.c b/lib/hx509/hxtool.c
index c3e8a5f7b..a8a2e4ddc 100644
--- a/lib/hx509/hxtool.c
+++ b/lib/hx509/hxtool.c
@@ -228,6 +228,7 @@ cms_create_sd(struct cms_create_sd_options *opt, int argc, char **argv)
 				    sz, 
 				    NULL,
 				    cert,
+				    NULL,
 				    anchors,
 				    pool,
 				    &o);
diff --git a/lib/krb5/pkinit.c b/lib/krb5/pkinit.c
index 9e0049def..b4c2a1922 100644
--- a/lib/krb5/pkinit.c
+++ b/lib/krb5/pkinit.c
@@ -155,6 +155,7 @@ _krb5_pk_create_sign(krb5_context context,
 				    NULL,
 				    cert,
 				    NULL,
+				    NULL,
 				    id->certs,
 				    sd_data);
     hx509_cert_free(cert);