CT code now calls X509_free() after calling SSL_get_peer_certificate()