Check the certificates before printing that the signature is valid. Improvide wording of error message as suggested by Love.
PKCS7 signatures. This was written by lha@ and discussed on tech-security. I've slightly cleaned up the program and man page. Contrary to the original version, this doesn't provide a default trust anchor.