diff --git a/lib/db_x509.cpp b/lib/db_x509.cpp
index dad14901..fa550b59 100644
--- a/lib/db_x509.cpp
+++ b/lib/db_x509.cpp
@@ -770,10 +770,12 @@ void db_x509::certRenewal(QModelIndexList indexes)
 			do_revoke(indexes, r);
 
 		// delete old certificates if requested
-		if (doReplace)
-			foreach(idx, indexes)
+		if (doReplace) {
+			foreach(idx, indexes) {
 				if (fromIndex<pki_x509>(idx))
 					deletePKI(idx);
+			}
+		}
 	}
 	catch (errorEx &err) {
 		XCA_ERROR(err);