`notation verify` only supports validating with ASCII-encoded x509 certs (PEM) Today, you can convert a binary encoded DER to PEM and verify using PEMs: `openssl x509 -in mycert.crt -inform DER -out mycert.pem` However, users shouldn't need to do this conversion manually and notation should add support for binary-encoded x509 certs