diff --git a/.gitea/workflows/ios-release.yaml b/.gitea/workflows/ios-release.yaml
index e35c928..6865ebe 100644
--- a/.gitea/workflows/ios-release.yaml
+++ b/.gitea/workflows/ios-release.yaml
@@ -45,13 +45,18 @@ jobs:
           security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
           security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
           echo "$CERTIFICATE_BASE64" | base64 --decode > $RUNNER_TEMP/cert.p12
+          echo "DEBUG: p12 file size: $(wc -c < $RUNNER_TEMP/cert.p12) bytes"
+          echo "DEBUG: p12 first bytes (hex): $(xxd $RUNNER_TEMP/cert.p12 | head -2)"
+          echo "DEBUG: import result:"
           security import $RUNNER_TEMP/cert.p12 \
             -P "$CERTIFICATE_PASSWORD" \
             -A -t cert -f pkcs12 \
-            -k $KEYCHAIN_PATH
+            -k $KEYCHAIN_PATH && echo "import OK" || echo "import FAILED exit $?"
           security list-keychain -d user -s $KEYCHAIN_PATH $(security list-keychains -d user | tr -d '"' | xargs)
           echo "DEBUG: keychain list:"
           security list-keychains -d user
+          echo "DEBUG: all certs in keychain (not just codesigning):"
+          security find-certificate -a $KEYCHAIN_PATH 2>&1 | grep "labl\|subj" || echo "none"
           echo "DEBUG: signing identities found:"
           security find-identity -v -p codesigning