When creating a subscription for Outlook contact, event, or message resources, setting the encryptionCertificateId property of the subscription resource allows an app to identify the appropriate certificate to decrypt any resource data in a change notification.