class Capsium::Package::DigitalSignatures
The “digitalSignatures” object of security.json. certificateType selects the signature scheme: absent means RSA-SHA256 (X.509), “OpenPGP” an OpenPGP signature (the publicKey then holds an armored OpenPGP public key).