Order created — [email protected]
Product · S/MIME
S/MIME that works for non-admins too.
Sectigo certificates in three variants, a self-service portal for application and renewal, bulk ordering for teams, reseller margins for MSPs.
S/MIME · Sectigo
12 active certificates, 2 expiring
Cert issued — [email protected]
Cert expires in 11 days — [email protected]
How it works
From application to signed mail
Choose product
Mailbox-validated (Multipurpose or Strict) for individuals, org-validated for official corporate correspondence.
Validation
Email click for mailbox, commercial register upload for org. Mailantis guides you through every step.
Install the certificate
PFX download from the portal, double-click to import in Outlook, Apple Mail or Thunderbird.
Highest security
Private-key generation in a secure vault
Mailantis handles the generation of your private key to the highest security standards. Until handover, the private key is kept in a dedicated, encrypted vault. Deletion takes place once you explicitly confirm successful receipt — until then the key remains available for re-download. No Mailantis staff and no third party has access to your key.
- Key generation on isolated servers inside the EU
- Encrypted, isolated vault until retrieval
- Hand-off exclusively encrypted (PKCS#12 / .pfx)
- Deletion on your confirmation — no backup, no recovery
Features
Three Sectigo products plus lifecycle
Mailbox-Validated Multipurpose (Sectigo 794)
Mailbox-Validated Strict (Sectigo 795, with CT logs)
Organization-Validated Multipurpose (Sectigo 796)
Self-service portal for application and renewal
Bulk ordering via CSV import for teams
PFX download (Outlook-, Apple-Mail compatible)
Renewal reminders 30 days before expiry
Reseller margins for MSPs (on request)
Workflow
From the portal into the mail client
PFX import in Outlook
After validation your certificate is ready as a .pfx file in the portal — password-protected. Double-click opens the Windows certificate import wizard.
Outlook then detects the certificate automatically in the Trust Center settings. The "Sign" and "Encrypt" buttons appear in the compose window.
Verify via OpenSSL (optional)# Inspect certificate contents
openssl pkcs12 -in mailantis-smime.pfx -info -nodes
# Extract public key
openssl pkcs12 -in mailantis-smime.pfx -clcerts -nokeys -out cert.pem
Pricing
Three Sectigo products to choose from
FAQ
Common questions about S/MIME
What is the difference between mailbox and organization validation?
Mailbox validation only confirms your email address via a click link. Organization validation also verifies your company name via a commercial register excerpt — which then appears visibly in the certificate. The latter is required for official government and banking correspondence.
How long does issuance take?
Mailbox-validated (794, 795): under 15 minutes after click confirmation. Organization-validated (796): 1–3 business days, since the company name is verified (commercial register excerpt, possibly phone verification).
Which mail clients support S/MIME?
Outlook (Windows, Mac, iOS), Apple Mail (macOS & iOS), Thunderbird, iOS/iPadOS Mail, Android Gmail (with Workspace S/MIME). Not in pure webmail services like the GMX or Yahoo web client — those always need a local client.
How do I install the certificate in Outlook?
You download the .pfx file from the Mailantis portal, double-click to import, enter the password. Outlook detects the certificate automatically and offers Sign/Encrypt in the compose window from then on.
Issues with S/MIME in Outlook for Android?
Outlook for Android currently has significantly limited S/MIME support: some certificates are not recognized, signing works only unreliably, and encrypted mail sometimes cannot be decrypted. This is a known limitation of the app, not of your certificate. Recommendation: use S/MIME on mobile primarily via iOS Mail / Apple Mail; on Android use the Gmail app with S/MIME enabled (Workspace) or specialized clients like K-9 Mail / FairEmail. On the desktop, S/MIME runs flawlessly in Outlook and Apple Mail.
What does a renewal cost?
Identical to the initial price. You receive a reminder email with a renewal link 30 days before expiry. For org-validated certs, verification is shortened since company data is already known.
S/MIME certificate in 15 minutes.
Mailbox validation immediately, organization validation in 1–3 business days.