# assigning certficates

**URL:** <https://community.ciphermail.com/t/assigning-certficates/291>\
**Category:** Gateway\
**Created:** [April 26, 2012, 9:19am UTC](https://community.ciphermail.com/t/assigning-certficates/291 "2012-04-26T09:19:55Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Perry\_Peeters](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@Perry\_Peeters](https://community.ciphermail.com/u/Perry_Peeters)\
**Post date:** [April 26, 2012, 9:19am UTC](https://community.ciphermail.com/t/assigning-certficates/291/1 "2012-04-26T09:19:55Z")

</div>

We want our Djigzo to PDF encrypt and S/MIME sign using a Comodo Secure Email certificate  
for a specific user (originator).  
The Key Usage of the certificate shows: "keyEncipherment, digitalSignature".  
Unfortunately the certificate for this user shows up in Djigzo as encryption certificate not as signing certificate  
and I can't unassign / reassign.  
Also I can't assign the certificate as signing certficate.  
Because of this setup emails are S/MIME encrypted not signed, not what I want.  
Is there a solution ?

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [April 26, 2012, 9:31am UTC](https://community.ciphermail.com/t/assigning-certficates/291/2 "2012-04-26T09:31:41Z")

</div>

A key can be used as a signing key if you have the private key and if  
the key usage allows the key to be used for signing. A (public) key can  
be used for encryption if the key usage allows encryption. Since you  
have the private key and the key can be used for signing you can select  
the key for signing. Whether or not you can select it as an encryption  
key does not matter. First make sure that your email will be correctly  
signed. This can be done by deselecting "Only sign when encrypt". Once  
you know that your outgoing email will be correctly signed, you can  
enable signing of the PDF encrypted email by selecting the PDF advanced  
option "Sign email".

Kind regards,

Martijn Brinkers

> **···**
>
> On 04/26/2012 11:19 AM, Perry Peeters wrote:
> 
> > We want our Djigzo to PDF encrypt and S/MIME sign using a Comodo Secure Email certificate  
> > for a specific user (originator).  
> > The Key Usage of the certificate shows: "keyEncipherment, digitalSignature".  
> > Unfortunately the certificate for this user shows up in Djigzo as encryption certificate not as signing certificate  
> > and I can't unassign / reassign.  
> > Also I can't assign the certificate as signing certficate.  
> > Because of this setup emails are S/MIME encrypted not signed, not what I want.  
> > Is there a solution ?