Hmm, ASN1 errors cause a -1 indeed (like what I had yesterday).