Clarify docs.

Document that the certificate passed to SSL_CTX_add_extra_chain_cert()
should not be freed by the application.

PR#3409
Don't advertise ECC ciphersuits in SSLv2 compatible client hello.

PR#3374
Handle IPv6 addresses in OCSP_parse_url.

PR#2783