store 3-byte length with DER-formatted certificates (instead of 2 bytes)