private boolean validSignature(String source, JSONObject jsonObject)
throws JSONException, IOException {
PublicKey pubKey = fetchPubKey(jsonObject.getString("SigningCertURL"));
SignatureChecker signatureChecker = new SignatureChecker();
return signatureChecker.verifyMessageSignature(source, pubKey);
}