Suggest where they should be free()d from please.
I can put it into a TLSGenericDeInitialize(), that both this function and TLSDeInitialize() - which is really TLSClientDeInitialize() - call.  As it stands, both here and TLSDeInitialize() do this tidy-up.
This is, in short, no less an appropriate place to put these frees than in TLSDeInitialize(), which is client-specific just as this is server-specific.