I have not worked with this request handler yet.
But based on few documentation I read, a wild guess could be, could you try
request.getHttpServletRequest().getAttribute
Just in case, if your certificate is still attached with HttpServletRequest and not in IMxRuntimeRequest
If IMxRuntimeRequest extends HttpservletRequest, this does not help. I could not find the API details of IMxRuntimeRequest