Revise private key DER format.

The SEC 1 standard prefers to store the private key as an octet
string; in Go's ASN.1 package, this translates to a byte slice.