incref the X509Req when returning an X509Name from get_subject which refers to it; this prevents a segfault if the X509Name outlives the X509Req; update docs to reflect this and to reflect previous similar changes which were apparently made to X509.get_subject and X509.get_issuer
diff --git a/doc/html/openssl-netscape-spki.html b/doc/html/openssl-netscape-spki.html
index db08e2f..b83c869 100644
--- a/doc/html/openssl-netscape-spki.html
+++ b/doc/html/openssl-netscape-spki.html
@@ -46,34 +46,40 @@
<BR>
3.1.9 NetscapeSPKI objects
</H3>
+
<P>
-<EM><EM><EM>NetscapeSPKI objects have the following methods:
-</EM></EM></EM>
+NetscapeSPKI objects have the following methods:
+
<P>
<dl><dt><b><a name='l2h-76'><tt class='method'>b64_encode</tt></a></b>()
<dd>
Return a base64-encoded string representation of the object.
</dl>
+
<P>
<dl><dt><b><a name='l2h-77'><tt class='method'>get_pubkey</tt></a></b>()
<dd>
Return the public key of object.
</dl>
+
<P>
<dl><dt><b><a name='l2h-78'><tt class='method'>set_pubkey</tt></a></b>(<var>key</var>)
<dd>
Set the public key of the object to <var>key</var>.
</dl>
+
<P>
<dl><dt><b><a name='l2h-79'><tt class='method'>sign</tt></a></b>(<var>key, digest_name</var>)
<dd>
Sign the NetscapeSPKI object using the given <var>key</var> and <var>digest_name</var>.
</dl>
+
<P>
<dl><dt><b><a name='l2h-80'><tt class='method'>verify</tt></a></b>(<var>key</var>)
<dd>
Verify the NetscapeSPKI object using the given <var>key</var>.
</dl>
+
<P>
<DIV CLASS="navigation">