Don't leak X509_OBJECT in an error path