DER, or Distinguished Encoding Rules, is a strict binary encoding used to store structured data such as X.509 certificates. It is a canonical form of ASN.1 encoding, which means the same certificate data should always be represented in one exact byte sequence. That consistency makes DER useful for signing, validating, and comparing certificates reliably.
In cyber security, DER matters because VPNs, browsers, mail systems, and other trust-heavy services must parse DER-encoded certificates from untrusted network input. If a parser mishandles length fields, nested structures, or unexpected values, attackers may trigger validation bypasses or memory-corruption bugs such as heap overflows. Defenders care about DER because robust decoding is part of secure certificate handling: strict parsers, input validation, and vendor patches help prevent malformed certificate data from becoming a pre-authentication attack path.