$ unzip -q xxx.ipa
$ codesign -d –extract-certificates Payload/*.app
$ openssl x509 -inform DER -in codesign0 -noout -nameopt -oneline -dates
$ unzip -q xxx.ipa
$ codesign -d –extract-certificates Payload/*.app
$ openssl x509 -inform DER -in codesign0 -noout -nameopt -oneline -dates