[CM] Debug output on manual certs adding.
[CM] Offer *.pem in the mask.
[CM] Filter uniques and nulls before manual adding.
[CM] Warn on empty or non-added certs.