diff --git a/unstack.sh b/unstack.sh
index bc439e90bf..4364e58a32 100755
--- a/unstack.sh
+++ b/unstack.sh
@@ -132,6 +132,9 @@ if is_service_enabled tls-proxy; then
     stop_tls_proxy
     cleanup_CA
 fi
+if [ "$USE_SSL" == "True" ]; then
+    cleanup_CA
+fi
 
 SCSI_PERSIST_DIR=$CINDER_STATE_PATH/volumes/*