Why a DER length is checked against its parent, not the buffer

A length field is the first place two readers of the same certificate start to disagree. Before a...