roboto/com.android.keyattestation.verifier.provider/KeyAttestationCertPath/leafCert

leafCert

fun leafCert(): X509Certificate

Returns the leaf certificate from the certificate chain.

It is expected that the leaf certificate will always be the first certificate in the chain. See "Chain extension attack prevention" from go/how-to-validate-key-attestations for details.

Return

the leaf certificate from the chain if present, or null otherwise.