Gets the certificate path that was built: the signer's certificate first, then each issuer, ending at a trust anchor when the chain is trusted; empty when there is no signer certificate.
public IReadOnlyList<X509Certificate2> CertificatePath { get; }
RFC 5280 §6.1.