From what I understand:
A sender encrypts a message with their cert then encrypts their cert with the recipients public cert and sends it with the message.
The recipient uses their private key to decrypt the sender's cert which is then used to decrypt the message.