diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index 3ff817277..ea513b2f3 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -4656,7 +4656,7 @@ static char **crtlist_dup_filters(char **args, int fcount)
 	char **dst;
 	int i;
 
-	dst = calloc(fcount, sizeof(*dst) + 1);
+	dst = calloc(fcount + 1, sizeof(*dst));
 	if (!dst)
 		return NULL;