Usage: cmstest [-q(uiet)] [-r(efblobs)] [-s signer1] [-S signer2] [-k keychain] [-a anchorFile] By default this test expects to see two identities, with email addresses of dmitch@apple.com and dmitch@dmitch.com, in a standard Identity search of the current user's default keychain search list. You can specify different Identities (by email address) and/or a specific keychain with the -s, -S, and -k options. Note: if you do specify alternate Identities, the identities you specify have to resolve to a known root cert with a total cert chain length of 3 (one for the leaf, one intermediate, one root).