diff --git a/avbroot/openssl.py b/avbroot/openssl.py
index e092857..a2e2268 100644
--- a/avbroot/openssl.py
+++ b/avbroot/openssl.py
@@ -11,10 +11,15 @@ def _get_modulus(path, is_x509):
     certificate.
     '''
 
+    # openssl 1.1 does not support autodetection
+    with open(path, 'rb') as f:
+        is_pem = f.read(1) == b'-'
+
     output = subprocess.check_output([
         'openssl',
         'x509' if is_x509 else 'rsa',
         '-in', path,
+        '-inform', 'PEM' if is_pem else 'DER',
         '-noout',
         '-modulus',
     ])