Can `pesign` be extended to show which certificates are in the `--certdir`? The ability to show which certs are in the dir will help dramatically with setting `-c` and `-t`.