Receiving error when using serviceCert to include out-of-band Widevine certificate

Hi, all! I am trying to use the serviceCert property of the Content Node to include a DRM certificate for an asset. Other platforms can use this certificate, but on Roku, I get

{
  "error": "Protected content license error.",
  "errorObject": {
    "code": -6,
    "message": "buffer:loop:unset:DRM exception: DRM exception: setDrmParams: [sess.decrsamp] setServiceCertificate() failed : 1(Cdm::kTypeError):extra:content_id:2:err_clip_idx:0:etype:buffer:num_keys:0:num_lic:1:program_id:"
  }
}

I’ve tried base-64 encoded, non-base-64 encoded, and wrapped versions of the cert string and always receive the same error. Is something extra needed to implement the out-of-band certificate?

Looks like it needed to be converted from base 64 to hex encoding. This is despite google results insisting that it needs to be base 64 encoded, when the docs don’t say that. Of course, the docs don’t say which encoding to use either.

bytes = createObject("roByteArray")
bytes.fromBase64String(certificate)
contentNode.drmParams.serviceCert = bytes.toHexString()