public function verifySignature(TokenRequest $tokenRequest, $certificate)
    {
        $result = openssl_verify(
            $tokenRequest->getIssuer() . ':' . $tokenRequest->getUsername(),
            base64_decode($tokenRequest->getSignature()),
            $certificate
        );

        return $result === 1 ? true : false;
    }