Hmm, could these two function be combined? The only difference is the `derBlock.Type` check. Also, we should support PEM-encoded files, as those are pretty common (nginx/haproxy use them for instance).