cert_sk isn't always allocated, so freeing it may cause a crash.