ensure that the generated CRL is in DER format