getPublicKeyHex

Compressed P-256 pubkey hex, or null when no sigil.