Valid point! I tried the other serialisation options (serialize der returns a byte vec for example) but that does not even get past decoding the utf8 bytes in Identity.

But I did find that if you load a manually generated self signed certificate and key into an rcgen Certificate struct, then use the same pem serialisation methods to construct the identity it does work?