Fix null-indirection in certextract expansion