title: How to use PackageInfo.GET_SIGNING_CERTIFICATES in API 28?
body: <p>The documentation of PackageManager.GET_SIGNATURES says "This constant was deprecated in API level 28. Use GET_SIGNING_CERTIFICATES instead".</p>
  
  <p>Unfortunately it was not secure and was easily hacked.</p>
  
  <p>How can you use the new "GET_SIGNING_CERTIFICATES" introduced with Android P?</p>