diff --git a/lib/hx509/hxtool.c b/lib/hx509/hxtool.c
index 1967b116e..b43d5db7b 100644
--- a/lib/hx509/hxtool.c
+++ b/lib/hx509/hxtool.c
@@ -649,6 +649,7 @@ pcert_verify(struct verify_options *opt, int argc, char **argv)
     hx509_certs_free(&chain);
     hx509_certs_free(&anchors);
 
+    hx509_revoke_free(&revoke_ctx);
 
     return ret;
 }
diff --git a/lib/hx509/revoke.c b/lib/hx509/revoke.c
index 4ae059a58..b21455a91 100644
--- a/lib/hx509/revoke.c
+++ b/lib/hx509/revoke.c
@@ -100,6 +100,7 @@ hx509_revoke_free(hx509_revoke_ctx *ctx)
 
     for (i = 0; i < (*ctx)->ocsps.len; i++)
 	free_ocsp(&(*ctx)->ocsps.val[i]);
+    free((*ctx)->ocsps.val);
 
     free((*ctx)->crls.val);