I've been looking for a multibrowser solution to digital signatures from long time, and I think there is no standard solution. So you must use CAPICOM (ActiveX) or Java to produce a valid PKCS#7 signature.

There is an open question in google I would like to monitor.

http://answers.google.com/answers/threadview?id=375067