Decrypted PEM has wrong padding