CKA_SERIAL_NUMBER should be DER encoded