Extract certificate from WCF secure envelope

gistfile1.cs

var ms = new MemoryStream(secureEnvelopeBytes);
var xRdr = new XmlTextReader(ms);

var message = Message.CreateMessage(xRdr, int.MaxValue, MessageVersion.Soap12);
var securityHeader = message.Headers.FirstOrDefault(x => x.Name == "Security");
if (securityHeader != null)
{
	var securityElement = XElement.Parse(securityHeader.ToString());
	var binarySecurityToken = securityElement.Descendants(
		XName.Get("BinarySecurityToken", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd")).Single();
	var certBytes = Convert.FromBase64String(binarySecurityToken.Value);
	var cert = new X509Certificate2(certBytes);

	if (cert != null)
	{
		var certChain = new X509Chain();
		certChain.ChainPolicy.RevocationMode = X509RevocationMode.NoCheck;
		var result = certChain.Build(cert);
		var lastCertInChain = certChain.ChainElements.Cast<X509ChainElement>().LastOrDefault();

		return CreateSingleRemoverWithSubjectIssuedBy(cert.Subject, lastCertInChain.Certificate.Thumbprint, maxPayloadSize);
		
	}
	
}