I have a PKI certificate in
Keychain Access.app on OS X 10.9, together with the private key.
The manual page for
/usr/bin/security indicates that there is a
-x option for
security import to specify that
private keys are non-extractable after being imported, which I believe must have been used on my key.
However, there's no magic storage with copy protection, and if the certificate is still usable in the system somehow, then surely it is still in there somewhere, stored in its full glory with all the relevant bits, and surely there must be a way to still export it. How?