Gets the time-stamping unit's certificate, or null when the token does not carry it.
null
public X509Certificate2? SignerCertificate { get; }
RFC 3161 §2.3.