Use PEM functions as suggested by OpenSSL docs.