openssl x509 -inform der -in certificate.cer -out certificate.pem