ASN1_item_verify needs to initialize ctx before any "goto err" can