FYI - the Express Checkout module and other PayPal support built in to Zen Cart do not work with the downloaded api certificate (pem file) discussed in this post.

The Zen Cart modules use the API Signature components for security, *not* the API Certificate option.

Also worth noting ... at the present time, PayPal does not allow the use of both API signature and API certificate on the same PayPal account.