I’m thoroughly confused trying to get S/MIME certs working right.