diff --git a/dnscrypt-proxy/xtransport.go b/dnscrypt-proxy/xtransport.go
index 91551ce7..d59dc65b 100644
--- a/dnscrypt-proxy/xtransport.go
+++ b/dnscrypt-proxy/xtransport.go
@@ -171,6 +171,9 @@ func (xTransport *XTransport) rebuildTransport() {
 				dlog.Fatal(err)
 			}
 			systemCertPool, err := x509.SystemCertPool()
+			if err != nil {
+				dlog.Fatal(err)
+			}
 			systemCertPool.AppendCertsFromPEM(caCert)
 			tlsClientConfig.RootCAs = systemCertPool
 		}