Колекция сертификатов из httpcontext

var httpContext = context.GetHttpContext();
clientCertificate = httpContext.Connection.ClientCertificate;

public struct FullIdentity
    {
        public readonly X509Certificate2[] RestChain;
 
        public readonly X509Certificate2 Cert;
 
        public readonly byte[] NodeID;
 
        public readonly X509Certificate2 Leaf;
 
        public readonly AsymmetricAlgorithm PrivateKey;
 public FullIdentity(X509Certificate2[] RestChain, X509Certificate2 Cert, byte[] NodeID, X509Certificate2 Leaf, AsymmetricAlgorithm PrivateKey)
        {
            this.RestChain = RestChain;
            this.Cert = Cert;
            this.NodeID = NodeID;
            this.Leaf = Leaf;
            this.PrivateKey = PrivateKey;
        }
 
        public FullIdentity(PeerIdentity peerIdentity, AsymmetricAlgorithm PrivateKey)
        {
            this.RestChain = peerIdentity.RestChain;
            this.Cert = peerIdentity.Cert;
            this.NodeID = peerIdentity.NodeID;
            this.Leaf = peerIdentity.Leaf;
            this.PrivateKey = PrivateKey;
        }
}

 var collection = TLSCert(IdentityChain.ToArray(), options.fullIdentity.Leaf, options.fullIdentity.PrivateKey); // тут выгружаем коллекцию и добавляем приватный ключ в X509Certificate2
 var handler = new HttpClientHandler();
 handler.ClientCertificates.AddRange(collection);
GrpcChannel channel = GrpcChannel.ForAddress("https://localhost:443", new GrpcChannelOptions
            {
                HttpClient = new HttpClient(handler),
                Credentials = ChannelCredentials.SecureSsl,
            });

handler.ServerCertificateCustomValidationCallback =
    (httpRequestMessage, cert, cetChain, policyErrors) => {
        return true;
    };

            var handler = new HttpClientHandler();
            handler.ClientCertificates.AddRange(collection);
            var httpClient = new HttpClient(handler);
            httpClient.DefaultRequestHeaders.Add("Client-Cert", $":{BitConverter.ToString(options.fullIdentity.RawChain()[0]).Replace("-","")}:");
            var opt = options.fullIdentity.RawChain().ToList();
            var header = CreateHeader(opt);
            httpClient.DefaultRequestHeaders.Add("Client-Cert-Chain", header);
            GrpcChannel channel = GrpcChannel.ForAddress("https://localhost:443", new GrpcChannelOptions
            {
                HttpClient = httpClient,
                Credentials = ChannelCredentials.SecureSsl,
            });