If a signed modular JAR is linked into a jimage, the code signer information (certificates) should be extracted from the JAR and made available at runtime so that applications can use it for authentication or policy decisions.