- Add PEM bundle, chain, fullchain, and private-key exports for issued PKI certificates. - Fix PKCS#12 exports for non-RSA certificates. - Audit and permission-protect all private-key export operations. - Align certificate-issuance dialog transitions with the shared modal behavior.