diff --git a/src/file_analysis/analyzer/x509/X509Common.cc b/src/file_analysis/analyzer/x509/X509Common.cc
index 367b7e562a..dba593a3eb 100644
--- a/src/file_analysis/analyzer/x509/X509Common.cc
+++ b/src/file_analysis/analyzer/x509/X509Common.cc
@@ -213,6 +213,7 @@ void file_analysis::X509Common::ParseSignedCertificateTimestamps(X509_EXTENSION*
 		reporter->Error("X509::ParseSignedCertificateTimestamps could not parse SCT");
 		}
 
+	M_ASN1_OCTET_STRING_free(inner);
 	OPENSSL_free(ext_val_second_pointer);
 
 	interp->FlowEOF();
diff --git a/src/file_analysis/analyzer/x509/functions.bif b/src/file_analysis/analyzer/x509/functions.bif
index 478332aecf..8212835e2e 100644
--- a/src/file_analysis/analyzer/x509/functions.bif
+++ b/src/file_analysis/analyzer/x509/functions.bif
@@ -703,8 +703,8 @@ sct_verify_err:
 	if (mdctx)
 		EVP_MD_CTX_destroy(mdctx);
 	if (key)
-	EVP_PKEY_free(key);
-	cerr << errstr << endl;
+		EVP_PKEY_free(key);
+
 	reporter->Error("%s", errstr.c_str());
 	return new Val(0, TYPE_BOOL);
 	%}