I created a cert with openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 1000 and then converted it to DER with openssl x509 -in cert.pem
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 1000
openssl x509 -in cert.pem