I welcome signed and encrypted mail, although I may take longer to reply to it because I have not yet implemented decent support for it in my mail client. I welcome both OpenPGP and CMS / S/MIME messages. Here are the relevant files: . riastradh.pgp (key id BD2D02B0) (Key fingerprint: BDC7 C20D 793B 0AEE 7CCA 15A3 0635 0580 BD2D 02B0) My current OpenPGP certificate. This contains only my public key, user id, and self-signature packets. If you want other signatures, look for them at a public key server. . riastradh.pem (SHA-1 fingerprint: 520E 30DD 6728 DA77 D598 F87F ECBC 333B D33B BE87) My current x.509 certificate from CSAIL. Unless you are affiliated with CSAIL, you probably do not have a root CA certificate with any chain to this certificate, so that verifying this one will fail. You can find CSAIL's CA certificates at if you want. . riastradh.pem.p7s A signature on my current x.509 certificate created with my last (now expired) x.509 certificate. If you have that x.509 certificate in a PEM file named , you can verify this one with openssl smime -verify -noverify -nointern -inform PEM -certfile -content riastradh.pem -in riastradh.pem.p7s -out /dev/null Yes, I really meant to write `-verify -noverify'. If verification succeeds, OpenSSL will proceed to print `Verification successful' to standard error (and the content of riastradh.pem to /dev/null). If verification fails, OpenSSL will barf. These files are mirrored at