Call NETSCAPE_SPKI_free() before returning.