get Package Signer
Get the standard, lowercase SHA-256 fingerprint used to represent an APK or JAR signing key. NOTE: this does not handle signers that have multiple X.509 signing certificates.
Calling the X.509 signing certificate the "signature" is incorrect, e.g. [android.content.pm.PackageInfo.signatures] or [android.content.pm.Signature]. The Android docs about APK signatures call this the "signer".