cPickle!
Test now compares unpickled der to certificate der