Sectigo® S/MIME Mailbox Validated (MP) is an E-Mail Certificate that encrypts your e-mail and adds a digital signature to the messages you send. Sectigo® acts as the Certificate Authority (CA), issuing it once control of the e-mail address has been confirmed.
Validation confirms control of the mailbox and nothing more. No company records are examined, so issuance normally completes within minutes of you answering the confirmation message sent to the address being secured.
The E-Mail Certificate is issued to the address itself rather than to a verified organization name, which suits individuals, consultants, and small teams who want confidential e-mail and a signature recipients can rely on.
| Secures a Single E-Mail Address |
Rapid Mailbox Control Validation |
| E-Mail Encryption and Digital Signatures |
2048-bit Industry Standard E-Mail Certificate |
| Multiple Year Orders Available |
Delivered Via E-Mail |
| Compatible With Major E-Mail Clients |
Multipurpose Certificate Profile |
| Trustico® No Risk Refund Policy 🔗 |
The Trustico® Price Promise 🔗 |
| Tamper Detection on Signed Messages |
Free and Unlimited Reissues |
The sections below explain how the E-Mail Certificate is validated, what the Multipurpose profile permits, and how to put it in place.
Sectigo® as the Certificate Authority
Sectigo® is a long-established, widely trusted commercial Certificate Authority (CA). Its roots are present in the trust stores used by common e-mail clients and operating systems, so a message you sign is recognized without the recipient configuring anything.
Trustico® provides the E-Mail Certificate, while Sectigo® performs the validation and issues it. Learn About the Sectigo® Certificate Authority 🔗
Mailbox Validation
Mailbox validation confirms that you control the e-mail address being secured. The Certificate Authority (CA) sends a confirmation message to that address, and you complete the check by following the instructions it contains.
No organization records are reviewed, and no company name is placed in the issued E-Mail Certificate. The address itself is the identity that recipients see. Understand The Validation Procedure 🔗
Because the confirmation message is the whole of the check, the address you order must be one you can actually receive mail at. Review E-Mail Address Handling 🔗
Encryption and Digital Signatures
A digital signature proves a message came from the address it claims to come from, and reveals whether the content was altered in transit. Encryption keeps the message readable only by the intended recipient.
The E-Mail Certificate uses a 2048-bit RSA key with SHA-256 hashing. Most e-mail clients exchange public keys automatically once they receive a signed message from you, which is what allows a recipient to begin sending you encrypted mail.
The Multipurpose Certificate Profile
The S/MIME Baseline Requirements, set by the industry body that governs publicly trusted issuance, define generations of E-Mail Certificate. They differ in how the Extended Key Usage field may be set, and that field controls what the E-Mail Certificate is permitted to do.
The Multipurpose profile permits e-mail protection alongside additional uses, such as document signing. The Strict profile is limited to e-mail protection alone, so Multipurpose is the choice where one E-Mail Certificate needs to cover more than signed and encrypted mail.
Both profiles carry a maximum validity of 825 days under the same industry rules, and the older Legacy profile is no longer issued.
E-Mail Certificate Validity and Reissues
Your order is a license for the term you select. Because industry rules cap an individual E-Mail Certificate at 825 days, a longer license is kept current by reissuing the E-Mail Certificate during the term rather than issuing one for the whole period.
Reissues are free and unlimited across the license, for instance after you change your key or move to a new device. Manage your reissues in the Trustico® Tracking System 🔗
Key Generation and the Certificate Signing Request
The E-Mail Certificate is bound to a key pair that you generate. The Certificate Signing Request (CSR) carries your public key to the Certificate Authority (CA), while the Private Key remains with you and is never sent to Trustico®
Losing the Private Key also loses the ability to read any mail already encrypted to it, so keep a backup when you export it. Learn About the Certificate Signing Request 🔗
E-Mail Client Compatibility
The E-Mail Certificate works with the clients most people already run, including Microsoft Outlook, Apple Mail, and Mozilla Thunderbird, on desktop and on mobile devices.
Setup differs by client, because each one stores keys in its own way. Follow the guide for S/MIME in Office 365 🔗
Mobile devices are covered separately, and the steps on iOS differ again from those on a desktop client. Configure S/MIME on iOS Outlook 🔗
Suitable Uses
Mailbox validation fits individuals, consultants, and small teams sending confidential attachments, along with anyone who needs recipients to be able to confirm a message is authentic rather than forged.
Signed mail also gives recipients a way to tell a real message from an impersonation attempt, which is the mechanism most business e-mail fraud relies on. Read About the Business E-Mail Compromise Attack 🔗
Guides and Support
Trustico® publishes guides covering ordering, validation, and client setup, so most questions can be answered without contacting anyone. Read About S/MIME E-Mail Certificates 🔗
When you need a hand with an order or with validation, the Trustico® team can help through the published contact methods. Browse the Trustico® Support Resources 🔗
Refund Policy and Price Promise
Each order is a license that unlocks once the Certificate Authority (CA) completes validation. If validation cannot be completed beforehand, the value of the order is held as Trustico® Prepaid Credit rather than lost. Review the No Risk Refund Policy 🔗
A price match against advertised prices from other providers is available both before and after your order, so you are not left paying more than you should. Learn About The Trustico® Price Promise 🔗
Other Options
Where the E-Mail Certificate must carry a verified organization name, Organization Validation adds checks on the legal existence and address of the business. Compare Organization Validated E-Mail Certificates 🔗
