In Rustls, DER, and all certificate parsing and validation in general, is done in Rust.

https://github.com/rustls/webpki