> I do wish it was easier to load (SSL/TLS) certificates on them What do you mean by "easier"? Yubico PIV manager is super simple to use. Of course you have to

> I do wish it was easier to load (SSL/TLS) certificates on them What do you mean by "easier"? Yubico PIV manager is super simple to use. Of course you have to generate the certificate with OpenSSL yourself but that's part of the process. And the PIV certificates are automatically seen by OS. I'm using them in browser, git can be switched to use system certificate store effectively having hardware protected access to repos. SSH can also use them either via OpenSC or Putty CAC (depending on your OS). I've done that and it works, it's not much harder than the OpenPGP setup.