incref the X509Req when returning an X509Name from get_subject which refers to it; this prevents a segfault if the X509Name outlives the X509Req; update docs to reflect this and to reflect previous similar changes which were apparently made to X509.get_subject and X509.get_issuer
diff --git a/doc/html/openssl-pkcs12.html b/doc/html/openssl-pkcs12.html
index d881659..402fbd9 100644
--- a/doc/html/openssl-pkcs12.html
+++ b/doc/html/openssl-pkcs12.html
@@ -47,25 +47,29 @@
 <BR>
 3.1.7 PKCS12 objects 
 </H3>
+
 <P>
-<EM><EM><EM>PKCS12 objects have the following methods:
-</EM></EM></EM>
+PKCS12 objects have the following methods:
+
 <P>
 <dl><dt><b><a name='l2h-72'><tt class='method'>get_certificate</tt></a></b>()
 <dd>
 Return certificate portion of the PKCS12 structure.
 </dl>
+
 <P>
 <dl><dt><b><a name='l2h-73'><tt class='method'>get_privatekey</tt></a></b>()
 <dd>
 Return private key portion of the PKCS12 structure
 </dl>
+
 <P>
 <dl><dt><b><a name='l2h-74'><tt class='method'>get_ca_certificates</tt></a></b>()
 <dd>
 Return CA certificates within the PKCS12 object as a tuple. Returns
 None if no CA certificates are present.
 </dl>
+
 <P>
 
 <DIV CLASS="navigation">