Function pem_decode 

pub fn pem_decode(label: &str, pem: &str) -> Option<Vec<u8>>

Decode a PEM block with the expected label. Returns the DER bytes. Returns None if the label doesn’t match or base64 is invalid.