show signing certs available in keychain

list-keychain-identities.sh

#!/bin/bash

XSPLIT=~/bin/xsplit

pass=`dd if=/dev/random bs=1 count=256 2>/dev/null | openssl sha1`

(
sudo security export -k "/Library/Keychains/System.keychain" \
		-P "$pass" -t identities -f pkcs12 2>/dev/null
security export -k "$HOME/Library/Keychains/login.keychain" \
		-P "$pass" -t identities -f pkcs12 
) | \
	openssl pkcs12 -nokeys -passin "pass:${pass}" 2>/dev/null | \
	$XSPLIT -R '^-+END CERTIFICATE-+$' openssl x509 \
		-noout -fingerprint -subject -issuer -dates -alias