x509 signed tags

Similar to gpg signed tags requested by #19260 displaying x509 signed tags would be nice.

This is a follow-up issue based on !17773 (merged)