diff --git a/management/status_checks.py b/management/status_checks.py
index fc7bab48..d479ac7b 100755
--- a/management/status_checks.py
+++ b/management/status_checks.py
@@ -592,7 +592,7 @@ def check_dnssec(domain, env, output, dns_zonefiles, is_checking_primary=False):
 			# record that we suggest using is for the KSK (and that's how the DS records were generated).
 			# We'll also give the nice name for the key algorithm.
 			dnssec_keys_file = os.path.join(env['STORAGE_ROOT'], 'dns/dnssec/%s.conf' % alg_name_map[ds_alg])
-			if os.path.exists(dnssec_keys_file)
+			if os.path.isfile(dnssec_keys_file):
 				dnssec_keys = load_env_vars_from_file(dnssec_keys_file)
 				dnsssec_pubkey = open(os.path.join(env['STORAGE_ROOT'], 'dns/dnssec/' + dnssec_keys['KSK'] + '.key')).read().split("\t")[3].split(" ")[3]