diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index 520408f..af05cdb 100644
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -1753,9 +1753,7 @@
          * explicitly asked for. It doesn't add any security and just wastes
          * time.
          */
-        if (!xs->valid
-            && (xs != xi
-                || (ctx->param->flags & X509_V_FLAG_CHECK_SS_SIGNATURE))) {
+        if (xs != xi || (ctx->param->flags & X509_V_FLAG_CHECK_SS_SIGNATURE)) {
             if ((pkey = X509_get_pubkey(xi)) == NULL) {
                 ctx->error = X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY;
                 ctx->current_cert = xi;
@@ -1775,8 +1773,6 @@
             pkey = NULL;
         }
 
-        xs->valid = 1;
-
  check_cert:
         ok = check_cert_time(ctx, xs);
         if (!ok)