如何在Swift中验证X509Certificate？

import Security
import Foundation

guard let certificateURL = Bundle.main.url(forResource: "certificate", withExtension: "cer") else {
    print("Certificate file not found")
    return
}

guard let certificateData = try? Data(contentsOf: certificateURL) else {
    print("Failed to read certificate file")
    return
}

guard let certificate = SecCertificateCreateWithData(nil, certificateData as CFData) else {
    print("Failed to create certificate object")
    return
}

var trust: SecTrust?
let policy = SecPolicyCreateBasicX509()

guard SecTrustCreateWithCertificates(certificate, policy, &trust) == errSecSuccess else {
    print("Failed to create trust object")
    return
}

let options: NSDictionary = [
    kSecTrustOptionAllowExpired: true,
    kSecTrustOptionRequireRevPerCert: true,
    kSecTrustOptionPolicy: policy
]

guard SecTrustSetOptions(trust!, options) == errSecSuccess else {
    print("Failed to set trust options")
    return
}

var trustResult: SecTrustResultType = .invalid

guard SecTrustEvaluate(trust!, &trustResult) == errSecSuccess else {
    print("Failed to evaluate trust")
    return
}

switch trustResult {
case .unspecified, .proceed:
    print("Certificate is valid")
case .deny, .fatalTrustFailure, .invalid, .otherError:
    print("Certificate is invalid")
@unknown default:
    print("Unknown trust result")
}