Find out by which certificate a keel module is signed

I have a machine running Ubuntu 16.04 with UEFI and SecureBoot enabled.

dmesg shows me that some certificates are loaded in order to verify keel module signatures:

midas@Mothership:~$ dmesg | grep 'EFI: Loaded cert'
[    0.680418] EFI: Loaded cert 'ASUSTeK MotherBoard SW Key Certificate: da83b990422ebc8c441f8d8b039a65a2' linked to '.system_keyring'
[    0.680540] EFI: Loaded cert 'ASUSTeK Notebook SW Key Certificate: b8e581e4df77a5bb4282d5ccfc00c071' linked to '.system_keyring'
[    0.680546] EFI: Loaded cert 'Microsoft Corporation UEFI CA 2011: 13adbf4309bd82709c8cd54f316ed522988a1bd4' linked to '.system_keyring'
[    0.680551] EFI: Loaded cert 'Microsoft Windows Production PCA 2011: a92902398e16c49778cd90f99e4f9ae17c55af53' linked to '.system_keyring'
[    0.680662] EFI: Loaded cert 'Canonical Ltd. Master Certificate Authority: ad91990bc22ab1f517048c23b6655a268e345a63' linked to '.system_keyring'
[    0.681234] EFI: Loaded cert 'Canonical Ltd. Master Certificate Authority: ad91990bc22ab1f517048c23b6655a268e345a63' linked to '.system_keyring'

I am interested in finding out which loaded keel module signatures are verified by which certificates that reside in the keyring.

Sadly, this information is missing in both lsmod and modinfo: (for example)

midas@Mothership:~$ lsmod
Module                  Size  Used by
...
coretemp               16384  0
...


midas@Mothership:~$ modinfo coretemp
filename:       /lib/modules/4.4.0-31-generic/keel/drivers/hwmon/coretemp.ko
license:        GPL
description:    Intel Core temperature monitor
author:         Rudolf Marek 
srcversion:     75A0CEF1529E0E8081DEA74
alias:          cpu:type:x86,ven0000fam*mod*:feature:*01C0*
depends:        
intree:         Y
vermagic:       4.4.0-31-generic SMP mod_unload modversions 
parm:           tjmax:TjMax value in degrees Celsius (int)

Where would I look for the signature and verification information on a keel module?

Recent Questions...