Add documentation of OSSL_CRMF_CERTID_dup()