My S/MIME email certificate just expired, and I'd like to get another one. I got this expired certificate from Sectigo and it was a nightmare to get it into the keychain. I had to download some files from Sectigo then use openssl to massage the files into something that Monterey could understand.
Is there an easier way to do this? Where can I get an S/MIME certificate that is easier to install?
This description looks pretty good: https://www.macwhiz.com/blog/2014/11/18/apple-s-mime/
You’ll need to find a different certificate provider though, as StartSSL is gone. Actalis has free certs, etc.
Here’s a list of issuers: https://cabforum.org/working-groups/smime-certificate-wg/
Here’s a long dicussion about some of the issues: https://community.letsencrypt.org/t/reconsider-s-mime/175504/19
This description looks pretty good: https://www.macwhiz.com/blog/2014/11/18/apple-s-mime/
You’ll need to find a different certificate provider though, as StartSSL is gone. Actalis has free certs, etc.
Here’s a list of issuers: https://cabforum.org/working-groups/smime-certificate-wg/
Here’s a long dicussion about some of the issues: https://community.letsencrypt.org/t/reconsider-s-mime/175504/19
Thanks, that helped. I got a free certificate from Actalis, but then I was having some issues with trust. I ended up deleting the Actalis certificate from Keychain Access.
Now when I send an email from Mail, it is still signed by the Actalis certificate I deleted--even though I deleted it from the Keychain.
Now it seems like it is working, but I don't know how, as I deleted the Actalis certificate from the Keychain.
The certificate is still there even though I deleted it, and it seems to be working, and now the certificate is back.
Where can I get an S/MIME email certificate and import it into the keychain?
