On Thu, Nov 6, 2008 at 3:34 PM, Ben Laurie <ben@xxxxxxxxx> wrote: > > Surely an X.509 certificate is, by definition, in DER? Strictly speaking, no, that is not true (at least AFAICT). That appears to be true in practice, however. Tom