Suricata

The connp object must retain all certificate params that have been parsed successfully for a match later on. In case of an error during decoding/parsing SAN are freed from connp. This works so far because it is the last field to be parsed and if it errors out, it does not exist anyway. However, this leaves room for memory errors.