pkgutil --check-signature macOSUpd10.14.1.pkg
this does perform validation and report the most informative result of all:
Package “macOSUpd10.14.1.pkg”:
Status: signed by a certificate that has since expired
followed by the certificate chain. Unfortunately, pkgutil doesn’t appear able to check notarization, at least in Mojave, for which spctl is still required.
Link
https://eclecticlight.co/2019/10/25/how-to-check-signatures-on-apps-installers-and-packages/
Mac package certificate has expired for Acrobat or Reader
pkgutil --check-signature
Link
https://helpx.adobe.com/acrobat/kb/certificate-expired-acrobat-reader-mac-package.html