$ openssl x509 -in demoCA/cacert.pem -outform DER -out cacert.der
-------------------------
application/x-x509-ca-cert      der pem crt
