diff --git a/truststore_nss.go b/truststore_nss.go
index 9d72727..75cf1f6 100644
--- a/truststore_nss.go
+++ b/truststore_nss.go
@@ -100,13 +100,14 @@ func (m *mkcert) forEachNSSProfile(f func(profile string)) (found int) {
 		if stat, err := os.Stat(profile); err != nil || !stat.IsDir() {
 			continue
 		}
-		if _, err := os.Stat(filepath.Join(profile, "cert8.db")); !os.IsNotExist(err) {
-			f("dbm:" + profile)
-			found++
-		}
 		if _, err := os.Stat(filepath.Join(profile, "cert9.db")); !os.IsNotExist(err) {
 			f("sql:" + profile)
 			found++
+			continue
+		}
+		if _, err := os.Stat(filepath.Join(profile, "cert8.db")); !os.IsNotExist(err) {
+			f("dbm:" + profile)
+			found++
 		}
 	}
 	return