incref the X509Req when returning an X509Name from get_subject which refers to it; this prevents a segfault if the X509Name outlives the X509Req; update docs to reflect this and to reflect previous similar changes which were apparently made to X509.get_subject and X509.get_issuer
diff --git a/doc/html/openssl-x509req.html b/doc/html/openssl-x509req.html
index e65c246..0cc88c4 100644
--- a/doc/html/openssl-x509req.html
+++ b/doc/html/openssl-x509req.html
@@ -47,35 +47,41 @@
 <BR>
 3.1.3 X509Req objects 
 </H3>
+
 <P>
-<EM><EM>X509Req objects have the following methods:
-</EM></EM>
-<P><dl><dt><b><a name='l2h-58'><tt class='method'>get_pubkey</tt></a></b>()
+X509Req objects have the following methods:
+
+<P>
+<dl><dt><b><a name='l2h-58'><tt class='method'>get_pubkey</tt></a></b>()
 <dd>
 Return a PKey object representing the public key of the certificate request.
 </dl>
-<P><dl><dt><b><a name='l2h-59'><tt class='method'>get_subject</tt></a></b>()
+
+<P>
+<dl><dt><b><a name='l2h-59'><tt class='method'>get_subject</tt></a></b>()
 <dd>
-Return a <EM>borrowed reference to a X509Name object representing the subject
-of the certificate.  When the corresponding X509 or X509Req object is
-destroyed, this object will be invalid!
-</dl></EM>
+Return an X509Name object representing the subject of the certificate.
+</dl>
+
 <P>
 <dl><dt><b><a name='l2h-60'><tt class='method'>set_pubkey</tt></a></b>(<var>pkey</var>)
 <dd>
 Set the public key of the certificate request to <var>pkey</var>.
 </dl>
+
 <P>
 <dl><dt><b><a name='l2h-61'><tt class='method'>sign</tt></a></b>(<var>pkey, digest</var>)
 <dd>
 Sign the certificate request, using the key <var>pkey</var> and the message digest
 algorithm identified by the string <var>digest</var>.
 </dl>
+
 <P>
 <dl><dt><b><a name='l2h-62'><tt class='method'>verify</tt></a></b>(<var>pkey</var>)
 <dd>
 Verify a certificate request using the public key <var>pkey</var>.
 </dl>
+
 <P>
 
 <DIV CLASS="navigation">