折腾了一晚上用另外的签名从xcode archive导出ipa，最后发现居然是没有导入p12文件的原因。。。。
顺便把参考的帖子记录一下：
http://stackoverflow.com/questions/1747857/cssmerr-tp-not-trusted-error
http://stackoverflow.com/questions/15275017/name-of-the-certificate-authority-who-signed-ipa-ios
http://stackoverflow.com/questions/866761/setting-a-provisioning-profile-from-within-xcodebuild-when-making-iphone-apps
http://stackoverflow.com/questions/14881126/how-to-tell-what-profile-signing-certificate-was-used-to-sign-ipa
http://stackoverflow.com/questions/15758043/how-to-get-name-of-distribution-identity-from-p12-file