Before S/MIME can be used in any of the above applications, one must obtain and install an individual key/certificate either from one's in-house certificate authority (CA) or from a public CA.
Depending on the policy of the CA, the certificate and all its contents may be posted publicly for reference and verification.