Gets the unit's certificate path that was built, unit first; empty when there is no unit certificate.
public IReadOnlyList<X509Certificate2> CertificatePath { get; }
RFC 5280 §6.1; ISO 32000-2 §12.8.3.4.5 c).