In which I renew my S/MIME certificate. Again.
TL;DR: still not a great experience. Some small hopeful signs.