Gets the signer's certificate, whose public key verifies the signature. Its private key is not needed.
X509Certificate2 Certificate { get; }
ISO 32000-2 §12.8.3.3.1: "At minimum the CMS object shall include the signer's X.509 signing certificate."