Hi thanks for the nice script (needed it to setup KMail). For me it added my and the KIT-CA cert but somehow those above where missing, so I manually installed them from DFN. Could be that I missed something as I am a total noob :D . In any case many thanks.

Hi @urtvc, removing the CA-Chain (i.e. the DFN and Telekom certificates) from the .p12 ist kind of the point for this script, as gpgsm (which is used for signing git commits) only works if the p12 file contains the certificate and the key, without the certificate chain. Glad that you found a way for KMail anyway and this was helpful for other use cases.