switch to DER format, and require minimum 2048 keys
bug fix for der conversion