add X509_up_ref() documentation