diff --git a/src/tls.c b/src/tls.c
index c71fde6b..c0925fa7 100644
--- a/src/tls.c
+++ b/src/tls.c
@@ -46,14 +46,14 @@ bool tf_tls_context_set_certificate(tf_tls_context_t* context, const char* certi
 	BIO_puts(bio, certificate);
 	X509* x509 = PEM_read_bio_X509(bio, 0, 0, 0);
 	result = SSL_CTX_use_certificate(context->context, x509);
-	//X509_free(x509);
+	X509_free(x509);
 	while (true)
 	{
 		x509 = PEM_read_bio_X509(bio, 0, 0, 0);
 		if (x509)
 		{
 			SSL_CTX_add_extra_chain_cert(context->context, x509);
-			//X509_free(x509);
+			/* Docs say don't x509_free: https://www.openssl.org/docs/man3.2/man3/SSL_CTX_add_extra_chain_cert.html. */
 		}
 		else
 		{