asRootCertificatePublicKeyOrNull