On Windows, I can right-click a file and see who code signed it on the "Digital Signatures" tab of the Properties dialog. Is there a similar way to see which publisher signed an OS X app, or details about the certificate used to sign it?
I know I can run codesign -d -r- appname.app
to see details about the certificate, and codesign -vvvv appname.app
to see whether it passes validation, but neither of those shows me anything about the actual certificate or publisher who signed it, just the one in the bundle identifier for the app.
Use
$ codesign -dvvv the.app
And look to the Authority
fields such as
Authority=Adobe Systems, Incorporated
However, apps distributed on the Mac App Store are all signed by Apple's certificate:
Authority=Apple Mac OS Application Signing