code: func (s *X509Signer) Certificate(ctx context.Context) ([]byte, error) {
  	if err := s.Validate(); err != nil {
  		return nil, err
  	}
  	return s.certDer, nil
  }
docs: // Certificate returns ASN.1 DER blob with the certificate of the signer.