Why would we add a method that can create DER encoded sigs? I don't think someone will need to create DER sigs from (r,s) pairs? I am only using this because of the NIST vectors. Maybe we should add backend checks though on p, q values if OpenSSL is < 1.0.0 and fail there instead of letting OpenSSL fail with a -1?