def _match_certificate(matcher): return MatchesAny( Not(IsInstance(Certificate)), AfterPreprocessing( lambda c: x509.load_pem_x509_certificate( c.as_bytes(), default_backend()), matcher))