Supported: PEM-encoded certificate or CSR. Private keys are not decoded here.