How to open a P7M file

An email attachment arrives, but your computer does not know how to open it. The name ends in .p7m, perhaps after .pdf or .xml. That does not mean the document is broken. The file usually contains a document together with one or more digital signatures. Reading it means opening that signed envelope, then keeping the document separate from the checks on its signatures. This guide explains the practical steps and the limits of the result, without treating a reader as proof of legal validity.

Understand the signed envelope

P7M is a file extension commonly used for CAdES, a digital signature format based on the CMS standard. The content may be a PDF, an XML invoice or another file type. The signature covers the content bytes, rather than the filename. Removing .p7m from the name does not extract the document. It can simply cause another application to try to read the envelope as if it were an ordinary PDF.

Some envelopes contain several signers. Others contain another signed envelope, creating separate layers. The reader keeps these distinctions visible. A detached signature is another possibility: it does not contain the original document. The envelope alone cannot supply missing content. A message about detached content should therefore be treated differently from a truncated download or an unsupported file encoding.

Check the message first

Look at the sender and the reason for receiving the attachment. A digital signature does not automatically make every attachment safe to open or use. If the message is unexpected, confirm it through a contact method you already trust. Keep the original envelope, especially when you may need to establish where the document came from or compare the result with another verification tool.

PEC means Italian certified electronic mail. Receiving a file through PEC and finding a CAdES signature are different facts. The delivery channel and the signature on the content answer different questions, so one does not replace the other. A familiar filename is not enough to establish identity either: someone can rename a file without changing the content covered by its signature.

Open the document locally

In the reader, choose the file, drop it onto the page or paste it where your browser supports pasting files. Document processing takes place on your device. The app then moves to a dedicated reader view with the preview and signer information. A supported PDF can be previewed across all its pages. You do not need to buy a license before reading the complete preview.

Revocation checks arrive separately. A network failure does not stop the document opening. For these checks, the API receives certificate identifiers and the addresses of the issuer’s services, never the document. An unavailable answer remains unavailable and is not turned into a positive result. When you are offline, locally available content may still be readable while checks requiring a connection remain incomplete.

Read the checks separately

Content integrity, certificate trust and revocation are distinct checks. Integrity asks whether the content matches the signature. Certificate verification also examines the available trust chain. Revocation asks whether the issuing authority cancelled or suspended the certificate before its expiry. A single colour or a date asserted by the signer cannot answer all of these questions on its own.

A signing date inside the signature attributes may simply be the signer’s claim. A timestamp needs further authentication before it can establish a trusted date. When a certificate has expired, describing its status at an earlier time requires appropriate historical evidence. The reader explains which checks were possible. It does not promise legal or historical validity where the necessary evidence is missing.

Export the content carefully

Full preview and verification are free. Downloading or exporting through this service requires a license. The payment step appears when you export, showing the plan and conditions before you continue. An extracted PDF does not receive a new digital signature. Keep it distinct from the original envelope, which carries the CAdES signature information needed for later inspection and comparison.

If a format has no supported preview, its extracted content may still be available to download. Do not run an unexpected executable simply because it came inside a signed envelope. For professional decisions that require a specific assessment, keep the original file and compare the technical details with your organisation’s procedures. Opening the document is a useful first step, rather than an automatic decision that it can be relied upon for every purpose.

Further reading

AgID’s electronic signature information and the CMS standard provide the institutional context and technical format. The separate invoice guide explains how an original XML file differs from a readable representation of that file.