Clarify on certificate file formats

[raphaelm]

Apple gives out certificates in DER format but we need PEM format. We could

(a) validate that and reject DER files with a helpful error message

(b) try to automatically convert the file