diff --git a/bin/x509/pcap-sslcert.py b/bin/x509/pcap-sslcert.py
index 62c0ec0..189cc2a 100644
--- a/bin/x509/pcap-sslcert.py
+++ b/bin/x509/pcap-sslcert.py
@@ -50,7 +50,7 @@ for l in fileinput.input(args.r):
 
     if ((cert is None) and (len(certstring) > 0)):
         y = re.sub(" ", "", certstring).split('=')
-        a = y[2].split('certificate')[0]
+        a = y[1].split('certificate')[0]
         try:
             dercert = binascii.unhexlify(a)
         except TypeError: