SSL_get_peer_certificate() increments the reference count of the returned
object, so we need an additional X509_free() after using it.
clarify manpage
sync with current (after ssl inspection has been committed to OpenBSD)
update name to SSL Inspection