diff --git a/src/libstrongswan/plugins/revocation/revocation_fetcher.c b/src/libstrongswan/plugins/revocation/revocation_fetcher.c
index 36c74921e..5835077ad 100644
--- a/src/libstrongswan/plugins/revocation/revocation_fetcher.c
+++ b/src/libstrongswan/plugins/revocation/revocation_fetcher.c
@@ -269,6 +269,7 @@ METHOD(revocation_fetcher_t, fetch_ocsp, certificate_t*,
 							ocsp_response->get_nonce(ocsp_response)))
 	{
 		DBG1(DBG_CFG, "nonce in ocsp response doesn't match");
+		response->destroy(response);
 		request->destroy(request);
 		return NULL;
 	}