diff --git a/MOLAuthenticatingURLSession.podspec b/MOLAuthenticatingURLSession.podspec
index f6dbdb0..5dc2157 100644
--- a/MOLAuthenticatingURLSession.podspec
+++ b/MOLAuthenticatingURLSession.podspec
@@ -1,6 +1,6 @@
 Pod::Spec.new do |s|
   s.name         = 'MOLAuthenticatingURLSession'
-  s.version      = '2.7'
+  s.version      = '2.8'
   s.platform     = :osx
   s.osx.deployment_target  = '10.9'
   s.license      = { :type => 'Apache 2.0', :file => 'LICENSE' }
diff --git a/Source/MOLAuthenticatingURLSession/MOLAuthenticatingURLSession.m b/Source/MOLAuthenticatingURLSession/MOLAuthenticatingURLSession.m
index 888ccfa..613530b 100644
--- a/Source/MOLAuthenticatingURLSession/MOLAuthenticatingURLSession.m
+++ b/Source/MOLAuthenticatingURLSession/MOLAuthenticatingURLSession.m
@@ -261,7 +261,7 @@ - (NSURLCredential *)clientCredentialForProtectionSpace:(NSURLProtectionSpace *)
 
     NSURLCredential *cred =
         [NSURLCredential credentialWithIdentity:foundIdentity
-                                   certificates:intermediates
+                                   certificates:(intermediates.count) ? intermediates : nil
                                     persistence:NSURLCredentialPersistenceForSession];
     if (foundIdentity) CFRelease(foundIdentity);
     return cred;