diff --git a/library/x509_crl.c b/library/x509_crl.c
index b2b0bed..96120a9 100644
--- a/library/x509_crl.c
+++ b/library/x509_crl.c
@@ -353,14 +353,14 @@
         return( ret );
     }
 
-    crl->version++;
-
-    if( crl->version > 2 )
+    if( crl->version < 0 || crl->version > 1 )
     {
         x509_crl_free( crl );
         return( POLARSSL_ERR_X509_UNKNOWN_VERSION );
     }
 
+    crl->version++;
+
     if( ( ret = x509_get_sig_alg( &crl->sig_oid1, &sig_params1,
                                   &crl->sig_md, &crl->sig_pk,
                                   &crl->sig_opts ) ) != 0 )