<PackageReference Include="Microsoft.Identity.Client" Version="4.84.2-preview" />

Microsoft.Identity.Client.Internal.ClientCredential.CertificateAndClaimsClientCredential

public AssertionType AssertionType { get; }

public X509Certificate2 Certificate { get; }

The static certificate if one was provided directly; otherwise null. This is used for backward compatibility with the Certificate property on ConfidentialClientApplication.

public CertificateAndClaimsClientCredential(Func<AssertionRequestOptions, Task<X509Certificate2>> certificateProvider, IDictionary<string, string> claimsToSign, bool appendDefaultClaims, X509Certificate2 certificate = null)

Constructor that accepts a certificate provider delegate. This allows both static certificates (via a simple delegate) and dynamic certificate resolution.