diff --git a/tools/cert_create/src/main.c b/tools/cert_create/src/main.c
index 2ba110132a77087818039e3f71f4c2f3d9b97873..368493a882ee11a1c2dd801693f908cac8d84c94 100644
--- a/tools/cert_create/src/main.c
+++ b/tools/cert_create/src/main.c
@@ -539,6 +539,11 @@ int main(int argc, char *argv[])
 			exit(1);
 		}
 
+		for (cert_ext = sk_X509_EXTENSION_pop(sk); cert_ext != NULL;
+				cert_ext = sk_X509_EXTENSION_pop(sk)) {
+			X509_EXTENSION_free(cert_ext);
+		}
+
 		sk_X509_EXTENSION_free(sk);
 	}