Add some comments.
Use QualifyPath appropriately. Fixes Export-Certificate.
Export-Certificate uses correct prefix/suffix for CA certs.
Export-PrivateKey to PEM (OpenSSL) format.