- turns out BootSignature.jar accepts .pem as well as .der - AOSP uses "verity" keys by default for boot signatures: https://github.com/android/platform_build/tree/master/target/product/security
- turns out BootSignature.jar accepts .pem as well as .der - AOSP uses "verity" keys by default for boot signatures: https://github.com/android/platform_build/tree/master/target/product/security