SYMPTOM:
"java.security.InvalidKeyException: IOException : DER input, Integer tag error" appears when generating the client certificate using Strategy Certificate Server 9.4.1 - 10.x

CAUSE:
The key specified in the following location in certificateServerConfig.xml is encrypted. Make sure the key is decrypted.
<pr n="DERPrivateKey" v="WEB-INF/CA.key" desc="The private key of the signing certificate, in DER format"/> .
ACTION:
Refer to the following post to decrypt the key.
http://stackoverflow.com/questions/1391692/encrypting-with-rsa-private-key-in-java