diff --git a/mozilla/security/nss/lib/pk11wrap/pk11cert.c b/mozilla/security/nss/lib/pk11wrap/pk11cert.c
index 5aa8ed37e93..2059269b739 100644
--- a/mozilla/security/nss/lib/pk11wrap/pk11cert.c
+++ b/mozilla/security/nss/lib/pk11wrap/pk11cert.c
@@ -2648,7 +2648,7 @@ pk11ListCertCallback(CERTCertificate *cert, SECItem *derCert, void *arg)
     CERTCertTrust *trust;
     PRBool isUnique = PR_FALSE;
     char *nickname = NULL;
-
+    unsigned int certType;
 
     if ((type == PK11CertListUnique) || (type == PK11CertListRootUnique)) {
 	isUnique = PR_TRUE;
@@ -2692,7 +2692,7 @@ pk11ListCertCallback(CERTCertificate *cert, SECItem *derCert, void *arg)
     }
 
     /* if we want CA certs and it ain't one, skip it */
-    if( type == PK11CertListCA  && (!isCACert(newCert)) ) {
+    if( type == PK11CertListCA  && (!CERT_IsCACert(newCert, &certType)) ) {
 	CERT_DestroyCertificate(newCert);
 	return SECSuccess;
     }