tedu@ modified lib/libssl/src/crypto: ASN1_STRING_free can handle NULL, so callers don't need to check. ok miod