This section describes how to create a private key and a certificate request.
These instructions are intended for experienced users, as command line commands must be entered.

Download and install OpenSSL:
slproweb.com/products/Win32OpenSSL.html

Then press "Start" and open OpenSSL Command Prompt

Open a Terminalwindow.

openssl req -new -newkey rsa:4096 -keyout smime-privkey.pem -out smime-csr.pem -subj /CN=dummy/

... and choose a password that only you know.

• Select the certificate request file  smime-csr.pem for uploading.
• Request the certificate and use the same passwort as above.
• Save the p7b file as XXXX_YYYY_-_zzzzz@hochschule-trier.de.p7b
  Where: XXXX = first name, YYYY = last name und zzzzz = login name
• Save the certificate chain as CA-Zertifkatskette.pem

openssl pkcs7  -print_certs -in XXXX_YYYY_-_zzzzz@hochschule-trier_de.p7b -out smime-cert.pem
openssl pkcs12 -export -in smime-cert.pem -inkey smime-privkey.pem -out XXXX_YYYY_-_zzzzz@hochschule-trier_de.p12 -certfile CA-Zertifkatskette.pem

Impor XXXX_YYYY_-_zzzzz@hochschule-trier_de.p12  into your email client