verifySignature
Verify this certificate's own signature, and its extended-data signature when present.
This says the certificate was signed by whoever holds issuerKey; it says nothing about whether that issuer is trusted. CertificateChain.verify is what establishes that.
Throws
if a required attribute is missing or a signature fails