Da documentação:
verify-cert [-c certFile] [-r rootCertFile] [-p policy] [-k keychain] [-n] [-L] [-l] [-e emailAddress] [-s sslHost] [-q] Verify one or more certificates.
Options:
-c certFile Certificate to verify, in DER or PEM format. Can be specified
more than once; leaf certificate has to be specified first.
Tente isso:
security verify-cert -c certificate.pem