certChain

X509 certificate chain for the key, corresponds to x5c header value in JWT.

Public key in the first certificate chain must correspond to the private key used for signing. Certificate chain must be valid.

Anonymous keys have null certificate chain, X509Certified keys always have non-null not-empty certificate chains.