Also you can request a DER encoded certificate by its primary key (combination of issuer's name and certificate's serial number). Example : issuer's name = 'good-ca', certificate's serial number = 10