* openapi: Fix response schema for PKI Issue requests * tests * changelog * another expiration for generate/rotate root * more type fixes from @stevendpclark