incidentally I am looking at x509 type CSR's for secp256k1 public keys, where a public web domain can sign a users public key. BIP 66 mentions DER format compatability issues with openssl. Does that mean I cannot use openssl generated digital signatures as part of the chain of trust to internally signed libbitcoin signatures? I am still getting my head around this, is there any good info?