public X509Certificate getCertificate() {
        return ObjectUtils.defaultIfNull(this.certificate, this.certificates[0]);
    }
The certificate that we actually use.
support/cas-server-support-x509-core/src/main/java/org/apereo/cas/adaptors/x509/authentication/principal/X509CertificateCredential.java