diff --git a/program/src/cert_session.cpp b/program/src/cert_session.cpp
index 8ec95d3..8897f96 100644
--- a/program/src/cert_session.cpp
+++ b/program/src/cert_session.cpp
@@ -1625,7 +1625,8 @@ x509_get_rkey(X509 *origin, int keyring_id, char *rkey, int is_valid)
     }
     /** keyrind_id is 0, sign x509 by default */
     /** 0 uninsec, 1 insec*/
-    if (is_valid && keyring_id == 0) keyring_id = 1;
+    if (is_valid == 1 && keyring_id == 0) keyring_id = 1;
+	if (is_valid == 0 && keyring_id != 0) keyring_id = 0;
 
     struct pxy_obj_keyring *pxy_obj = get_obj_for_id(keyring_id);
     if (pxy_obj != NULL)