…d separately. The object identifier and parameters for SHA-256 (as defined in [ RFC5754 ]) MUST be used for the SignedData digestAlgorithms field and the SignerInfo digestAlgorithm field. The object identifier and parameters for rsaEncryption [ RFC3370 ] MUST be used for the Sign…

…entication for S/MIME May 2017 4. The local-part is hashed using the SHA2-256 [ RFC5754 ] algorithm, with the hash truncated to 28 octets and represented in its hexadecimal representation, to become the left-most label in the prepared domain name. 5. The string "_smimecert" becom…