AS
codesign --verify -vvvv -R='anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.1] exists and (certificate leaf[field.1.2.840.113635.100.6.1.2] exists or certificate leaf[field.1.2.840.113635.100.6.1.4] exists)' xxx.app
xxx.app: valid on disk
xxx.app: satisfies its Designated Requirement
test-requirement: code failed to satisfy specified code requirement(s)