DigiCert S/MIME certificates
Sign and encrypt email with a certificate from DigiCert. S/MIME certificates come in four types: see which one fits your mailbox and order it.
LeaderTelecom is an Interested Party of the CA/Browser Forum.
- A signed message proves who sent it and that nobody changed it on the way
- An encrypted message can be read only by the person it was written to
- Works in Outlook, Apple Mail, Thunderbird and other mail clients that support S/MIME
- Issued under the S/MIME Baseline Requirements of the CA/Browser Forum
* — with the purchase on 2 years.
Prices excl. and incl. VAT
Which S/MIME certificate do you need?
The CA/Browser Forum defines four types of S/MIME certificate. They differ in whose identity the certificate confirms, and that decides which one to order.
-
Mailbox-validated
The address alone is enough: a private mailbox, or an address at Gmail, Outlook.com or another public provider.
- The certificate shows
- The email address only
- What is checked
- That you control the mailbox
What to order Sectigo SMIME Mailbox Validation Multipurpose
-
Individual-validated
You write in your own name, not on behalf of an organisation: a freelancer, a lawyer, a doctor, a consultant.
- The certificate shows
- Your first and last name and the email address
- What is checked
- Your identity, and that you control the mailbox
What to order Certum SMIME Individual
-
Sponsor-validated
An employee writes on behalf of the organisation from a work address of their own, such as name@company.com.
- The certificate shows
- The employee's first and last name, the organisation and the email address
- What is checked
- The organisation and its control of the email domain. The organisation confirms that the person works for it
What to order DigiCert Secure Email for Employee
-
Organization-validated
The mailbox belongs to the organisation, not to one person: info@, invoices@, support@ or an automated sender.
- The certificate shows
- The organisation and the email address, without a person's name
- What is checked
- The organisation and its control of the email domain
What to order Certum SMIME Organization
A certificate for your employees' mailboxes
DigiCert Secure Email for Employee is a sponsor-validated certificate: DigiCert validates the organisation, and the organisation vouches for each employee it orders a certificate for.
What you need to order it
- An organisation that DigiCert can validate: its legal name, city and country
- A mailbox on a domain the organisation controls. Addresses at gmail.com, outlook.com and other public providers are not accepted
- The employee's first and last name, as they are to appear in the certificate
DigiCert Secure Email for Employee
Issuance from 1 day, with organisation validation
If you need a certificate for mail server protection, you'll need another certificate:
- — If you use MS Exchange — UCC
- — If you use another server — PositiveSSL
How an order goes
-
You place the order
Enter the mailbox address, the employee's first and last name and the organisation's details. -
DigiCert validates the organisation
DigiCert checks the organisation and its control of the email domain. Our support team guides you through it. -
The employee creates the certificate
DigiCert sends instructions to the mailbox. The employee follows them to create the certificate in the browser and adds it to the mail client.
Questions and answers
Can I order Secure Email for Employee for an address at gmail.com?
No. This certificate is issued only for addresses on a domain the organisation controls. For an address at a public provider, order a mailbox-validated certificate.
Does the person I write to need a certificate too?
Not to read a signed message: their mail client checks your signature by itself. To send someone an encrypted message you need their certificate, so to encrypt in both directions each side needs one.
What happened to DigiCert Client Premium and Secure Email for Business?
DigiCert stopped issuing Client Premium on 10 July 2025. The certificate to order instead is Secure Email for Employee, which DigiCert used to call Secure Email for Business.
What do I do with a certificate that has expired?
Keep it together with its private key. You need them to open the messages that were encrypted for that certificate; a new certificate does not open them.
Place an order and get free of charge
-
Support
We provide clients with quick, friendly and professional support via email and phone
-
Free unlimited reissuance
Free unlimited reissuance of the certificates when the private key is lost
Are you ready to try?
Free trial. No risk – test the certificate prior to payment.
Have any questions?
Call us now +31 20 7640722
Our clients
Payment Options
All transactions are processed via PCI-DSS compliant gateways. SEPA bank transfer also available for EU customers.