You actually can pass certificates in files on disk to Apple's codesign utility, it just involves understanding .keychain files. Also, while this only sometime

You actually can pass certificates in files on disk to Apple's codesign utility, it just involves understanding .keychain files. Also, while this only sometimes helps, it is worth looking for more error information in dmesg as that is where verification errors go.