Corrected an off-by-one error.

The issue was discovered using the codenomicon TLS suite.
doc update
prevent memset() from being optimized out.
cleaned up a bit _asn1_remove_node().