diff --git a/eclass/kernel-install.eclass b/eclass/kernel-install.eclass
index 7fd714111daf7..47afe6e750105 100644
--- a/eclass/kernel-install.eclass
+++ b/eclass/kernel-install.eclass
@@ -734,7 +734,7 @@ kernel-install_install_all() {
 	local module_ver
 	module_ver=$(<"${relfile}") || die
 
-	if [[ ! -r ${SECUREBOOT_SIGN_CERT} && -r ${kernel_cert} ]]; then
+	if [[ ! -r ${SECUREBOOT_SIGN_CERT} && -s ${kernel_cert} ]]; then
 		openssl x509 \
 			-inform DER -in "${kernel_cert}" \
 			-outform PEM -out "${T}/cert.pem" ||