You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Where can I get an S/MIME email certificate and import it into the keychain?

My S/MIME email certificate just expired, and I'd like to get another one. I got this expired certificate from Sectigo and it was a nightmare to get it into the keychain. I had to download some files from Sectigo then use openssl to massage the files into something that Monterey could understand.


Is there an easier way to do this? Where can I get an S/MIME certificate that is easier to install?

Posted on Sep 15, 2022 4:21 PM

Reply
Question marked as Top-ranking reply

Posted on Sep 15, 2022 4:35 PM

This description looks pretty good: https://www.macwhiz.com/blog/2014/11/18/apple-s-mime/


You’ll need to find a different certificate provider though, as StartSSL is gone. Actalis has free certs, etc.


Here’s a list of issuers: https://cabforum.org/working-groups/smime-certificate-wg/


Here’s a long dicussion about some of the issues: https://community.letsencrypt.org/t/reconsider-s-mime/175504/19

Similar questions

3 replies
Question marked as Top-ranking reply

Sep 15, 2022 4:35 PM in response to jtjbt20x

This description looks pretty good: https://www.macwhiz.com/blog/2014/11/18/apple-s-mime/


You’ll need to find a different certificate provider though, as StartSSL is gone. Actalis has free certs, etc.


Here’s a list of issuers: https://cabforum.org/working-groups/smime-certificate-wg/


Here’s a long dicussion about some of the issues: https://community.letsencrypt.org/t/reconsider-s-mime/175504/19

Sep 15, 2022 6:19 PM in response to MrHoffman

Thanks, that helped. I got a free certificate from Actalis, but then I was having some issues with trust. I ended up deleting the Actalis certificate from Keychain Access.


Now when I send an email from Mail, it is still signed by the Actalis certificate I deleted--even though I deleted it from the Keychain.


Now it seems like it is working, but I don't know how, as I deleted the Actalis certificate from the Keychain.


Where can I get an S/MIME email certificate and import it into the keychain?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.