TlsStream.peerCertificates

The peer's certificate chain, or null if none presented.

Only valid after handshake completes. Not const because a const method cannot hand out the stored mutable chain without casts.