diff --git a/src/charon/sa/transactions/ike_auth.c b/src/charon/sa/transactions/ike_auth.c
index c30dde2a4..e440f5e5f 100644
--- a/src/charon/sa/transactions/ike_auth.c
+++ b/src/charon/sa/transactions/ike_auth.c
@@ -475,6 +475,7 @@ static void import_certificate(private_ike_auth_t *this, cert_payload_t *cert_pa
 	}
 	else
 	{
+		cert->destroy(cert);
 		this->logger->log(this->logger, CONTROL, 
 						  "received end entity certificate is not trusted, discarded");
 	}