Notarization explainer

Paste the output of a signing command and read what it means. It is parsed right here on this page, and nothing is sent anywhere.

Paste the command output

Try an example:

Commands to run

spctl -a -vv YourApp.app
codesign -dv YourApp.app
xcrun stapler validate YourApp.app

For a DMG, use spctl -a -t open --context context:primary-signature -vv YourApp.dmg. For a pkg, use spctl -a -t install -vv YourApp.pkg.

This tool only knows the messages it has rules for. If it does not recognize something, it says so instead of guessing.