diff --git a/src/reverseproxy.js b/src/reverseproxy.js
index 57469bd79..f8b94bb3b 100644
--- a/src/reverseproxy.js
+++ b/src/reverseproxy.js
@@ -369,7 +369,7 @@ function ensureCertificate(vhost, domain, auditSource, callback) {
                     notifyCertChanged(vhost, function (error) {
                         if (error) return callback(error);
 
-                        if (certFilePath && keyFilePath) callback(null, { certFilePath, keyFilePath }, { renewed: true });
+                        if (certFilePath && keyFilePath) return callback(null, { certFilePath, keyFilePath }, { renewed: true });
 
                         // if no cert was returned use fallback. the fallback/caas provider will not provide any for example
                         getFallbackCertificate(domain, function (error, bundle) {