The jwt_verify can now take public certificates as second parameter, either with actual certificate path (no previously mentioned) or from a predefined crt-store or from a variable.