title: How to verify DER certificate with openssl?
body: <p>PEM works fine</p>
  <pre><code>openssl verify -CAfile CA/ca.crt leaf.cert.pem
  </code></pre>
  <p>But DER generated with <code>openssl x509 -in leaf.cert.pem -outform der -out leaf.cert.der</code> could not be verified</p>
  <pre><code>openssl verify -CAfile CA/ca.crt leaf.cert.der
  </code></pre>
  <p>produces</p>
  <pre><code>unable to load certificate
  4613703104:error:0909006C:PEM routines:get_name:no start line:crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
  </code></pre>
  <p><code>openssl verify</code> does not accept <code>-inform der</code> as other openssl commands.</p>
  <p>Does this mean there is no way to verify DER directly and I need to convert it to PEM and then verify?</p>