So a trustful CA issueing free S/Mime certificates > 3 month and acceptance in major browsers / mail tools is wanted. Why doesn't Let's Encrypt offer this service? https://letsencrypt.org/ Why isn't CAcert after years of participation listed as trusted CA in root stores? http://www.cacert.org/ kind regards Chris