DSA keys can be loaded from X.509 certificates