openssl: fix subjectAltNames leak