code: public Certificate[] getCertificates() {
          // getCodeSigners() does the sec check
          final CodeSigner[] codeSigners = getCodeSigners();
          if (codeSigners == null) {
              return null;
          }
          final List<Certificate> certList = new ArrayList<Certificate>(codeSigners.length * 3);
          for (CodeSigner signer : codeSigners) {
              certList.addAll(signer.getSignerCertPath().getCertificates());
          }
          return certList.toArray(new Certificate[certList.size()]);
      }
docs: Get the {@link Certificate}s for the virtual file.  Simply extracts the certificate entries from
  the code signers array.
  
  @return the certificates for the virtual file, or {@code null} if not signed