diff --git a/ipaserver/install/installutils.py b/ipaserver/install/installutils.py
index 8ce6b5296..b0e8f93bf 100644
--- a/ipaserver/install/installutils.py
+++ b/ipaserver/install/installutils.py
@@ -1043,6 +1043,7 @@ def load_external_cert(files, ca_subject):
             try:
                 nssdb.verify_ca_cert_validity(nickname)
             except ValueError as e:
+                cert, subject, issuer = cache[nickname]
                 raise ScriptError(
                     "CA certificate %s in %s is not valid: %s" %
                     (subject, ", ".join(files), e))