docs: @Beta
    public final X509Certificate verifySignature(X509TrustManager trustManager)
        throws GeneralSecurityException {
      List<String> x509Certificates = getHeader().getX509Certificates();
      if (x509Certificates == null || x509Certificates.isEmpty()) {
        return null;
      }
      String algorithm = getHeader().getAlgorithm();
      Signature signatureAlg = null;
      if ("RS256".equals(algorithm)) {
        signatureAlg = SecurityUtils.getSha256WithRsaSignatureAlgorithm();
      } else {
        return null;
      }
      return SecurityUtils.verify(
          signatureAlg, trustManager, x509Certificates, signatureBytes, signedContentBytes);
    }