Using already issued CSR

[schoen]

@Osiris, sure enough, I misremembered that. Perhaps the PEM/DER issue is still the problem here, though!