diff --git a/starttls/starttls.go b/starttls/starttls.go
index fa49b51..4f722e6 100644
--- a/starttls/starttls.go
+++ b/starttls/starttls.go
@@ -247,6 +247,10 @@ func GetConnectionState(startTLSType, connectName, connectTo, identity, clientCe
 		return nil, nil, fmt.Errorf("error connecting: %v", result.err)
 	}
 
+	if cri == nil {
+		return result.state, nil, nil
+	}
+
 	if result.state.Version < tls.VersionTLS12 && *cri != nil {
 		// Sending supported signature schemes was added in TLS 1.2,
 		// but Go lies to us in the GetClientCertificate callback and