- added option nokey for pkcs12 to avoid exporting private keys
- added command export-p7 to export certs using pkcs7 format.