ios - Retrieve certificate expiration date from an .ipa file? -

i know how view expiration date of .ipa file's provisioning profile (by renaming ipa zip, unzip , view expirationdate key in embedded.mobileprovisioning file).

but how can view expiration date of certificate used sign ipa?

i found can use codesign utility "extract" certs:

codesign --display --extract-certificates /applications/example.app 

this produces 3 files: codesign0, codesign1, codesign2. not sure how proceed after that.

do following:

unzip -q myapp.ipa $ codesign -d --extract-certificates payload/*.app $ openssl x509 -inform der -in codesign0 -noout -nameopt -oneline -dates 

after doing above, output with:

notafter=aug 4 16:08:00 2017 gmt

this certificate expiration date.