@aral I'm fully sympathise with you - I dealt with ASN.1 and DER/BER back in 2000's as part of large PKI projects and while the ASN.1 itself did make some sense back in 80's as a way to describe packets better than ASCII tables, the way it went later on was the worst of committee architecture design and enterprise mess even possible. It's overly complex, overgrown, weird and unique naming, inconsistent and sometimes vague. OpenSSL had its beating specifically for this reason...