diff --git a/wolfcrypt/src/asn.c b/wolfcrypt/src/asn.c
index 879a8adb1..d63806f5b 100644
--- a/wolfcrypt/src/asn.c
+++ b/wolfcrypt/src/asn.c
@@ -4665,7 +4665,11 @@ static int DecodePolicyOID(char *out, word32 outSz, byte *in, word32 inSz)
     #endif
             }
             idx += policy_length;
-        } while((int)idx < total_length && cert->extCertPoliciesNb < MAX_CERTPOL_NB);
+        } while((int)idx < total_length
+    #if defined(WOLFSSL_CERT_EXT)
+            && cert->extCertPoliciesNb < MAX_CERTPOL_NB
+    #endif
+        );
 
         WOLFSSL_LEAVE("DecodeCertPolicy", 0);
         return 0;