diff --git a/security/certverifier/NSSCertDBTrustDomain.cpp b/security/certverifier/NSSCertDBTrustDomain.cpp
index bceec885c09a..c1b04dfffac2 100644
--- a/security/certverifier/NSSCertDBTrustDomain.cpp
+++ b/security/certverifier/NSSCertDBTrustDomain.cpp
@@ -698,6 +698,11 @@ Result NSSCertDBTrustDomain::CheckRevocation(
       }
     }
   }
+#else
+  // "use" these fields to stop the compiler from complaining when
+  // MOZ_NEW_CERT_STORAGE is disabled.
+  Unused << mCRLiteMode;
+  Unused << mCRLiteTelemetryInfo;
 #endif
 
   // Bug 991815: The BR allow OCSP for intermediates to be up to one year old.
diff --git a/security/manager/ssl/CertBlocklist.cpp b/security/manager/ssl/CertBlocklist.cpp
index d0b05cee9319..9401b0deaadf 100644
--- a/security/manager/ssl/CertBlocklist.cpp
+++ b/security/manager/ssl/CertBlocklist.cpp
@@ -14,6 +14,7 @@
 #include "mozilla/Preferences.h"
 #include "mozilla/Unused.h"
 #include "nsAppDirectoryServiceDefs.h"
+#include "nsComponentManagerUtils.h"  // for do_CreateInstance
 #include "nsDependentString.h"
 #include "nsDirectoryServiceUtils.h"
 #include "nsICryptoHash.h"