diff --git a/src/pki.c b/src/pki.c
index 910838f6..e0209cd6 100644
--- a/src/pki.c
+++ b/src/pki.c
@@ -859,6 +859,7 @@ static int pki_import_cert_buffer(ssh_buffer buffer,
         goto fail;
     }
     rc = buffer_add_ssh_string(cert, type_s);
+    ssh_string_free(type_s);
     if (rc != 0) {
         goto fail;
     }