Fix null-indirection in certextract expansion

Found-by: Roman Rybalko