• MDMustStaple was unable to create the necessary OpenSSL OBJ identifier on some platforms,
  possibly because this fails if the OID is already configured in openssl.cnf, see
  here.
• Two memory leaks in cert issuer and alt-names lookup eliminated by Yann Ylavic.
• Changing MDMustStaple triggers certificate renewal.