out := output(parseMobileProvision(mp))
		_, err = f.Write(out)
		check(err)
		check(f.Close())

		cert, err := plistExtract(fname, "DeveloperCertificates:0")
		check(err)
		pcert, err := x509.ParseCertificate(cert)
		check(err)
		fmt.Printf("export GOIOS_DEV_ID=\"%s\"\n", pcert.Subject.CommonName)

		appID, err := plistExtract(fname, "Entitlements:application-identifier")
		check(err)

Go 1.23 changed the behavior of
[crypto/x509.ParseCertificate](/pkg/crypto/x509/#ParseCertificate) to reject
serial numbers that are negative. This change can be reverted with
the [`x509negativeserial` setting](/pkg/crypto/x509/#ParseCertificate).

Go 1.23 re-enabled support in html/template for ECMAScript 6 template literals by default.

pkg crypto/x509, func MarshalPKIXPublicKey(interface{}) ([]uint8, error)
pkg crypto/x509, func NewCertPool() *CertPool
pkg crypto/x509, func ParseCRL([]uint8) (*pkix.CertificateList, error)
pkg crypto/x509, func ParseCertificate([]uint8) (*Certificate, error)
pkg crypto/x509, func ParseCertificates([]uint8) ([]*Certificate, error)
pkg crypto/x509, func ParseDERCRL([]uint8) (*pkix.CertificateList, error)