It’s still impossible to extract an Estonian certificate from the smart card (or Mobiil-ID/Smart-ID), no?

I believe do, I didn't see a successful attack yet.