support for der encoded certificates, and DirName format alternate names