Add a missing CRYPTO_w_unlock in get_cert_by_subject