The end-user will be asked for this PIN when he/she imports the certificate into the certificate store of their machine. The PIN specified in the PIN fields is used to protect access to this. The Incommon Certificate Manager will deliver the certificate to the end-user in PKCS#12 file format (.p12 file). You will need this pass-phrase to install the cert. pfx), using the PIN you created for it at the time of request. When you receive your certificate from InCommon, it will be encrypted in the PKCS 12 format (.p12 or. You can use Client Certificates, also called 'S/MIME Certs' or 'Personal Certificates', with most e-mail clients to digitally sign or encrypt e-mail. Using S/MIME Client Certificates with Apple Mail and Outlook for OS X Installing the S/MIME Certificate on your Apple Mac