diff --git a/mozilla/security/nss/cmd/crlutil/crlutil.c b/mozilla/security/nss/cmd/crlutil/crlutil.c
index b01a9ae741d..3cce19e1e83 100644
--- a/mozilla/security/nss/cmd/crlutil/crlutil.c
+++ b/mozilla/security/nss/cmd/crlutil/crlutil.c
@@ -436,6 +436,7 @@ int main(int argc, char **argv)
     certHandle = CERT_GetDefaultCertDB();
     if (certHandle == NULL) {
 	SECU_PrintError(progName, "unable to open the cert db");	    	
+	NSS_Shutdown();
 	return (-1);
     }
 
@@ -468,5 +469,6 @@ int main(int argc, char **argv)
 	}
 #endif    
     }
+    NSS_Shutdown();
     return (rv);
 }