So let's say we have a OpenPGP mailing system which all mails are signed and encrypted with OpenPGP keys. And now you bought a CA signed x509 certificate and you want to imement into the mailing system. What should you do is the best?
First option is stripping out the public/private key pair as both system uses RSA. But will this method also take away the fact that the key is certified by a CA? Like I mean how is the x509 system verify the key is certified? Do they confirm the public key with CA (which won't matter)? Or does they also rely on data includes in x509 certificate (which will matter as converting those into asc file might lose them).
Another way is to sign your OpenPGP public key with your x509 private key and send it with the mail. But is this method working as I thought? Supposing the receiver do have the system to verify the public key signed by x509 certificate. Also is there software(s) that can make it an automatic workflow like showing messages "the mail is signed with the public key attached", "the public key is signed by certificate signed by XXX" when the mail is opened.