Use X509_get0_pubkey where appropriate