verify

Check that the response really came from the server whose certificate it names.

Two steps: the declared digest must match a SHA-256 of the LicenseResponse element as received, and the signature over the SignedInfo element must verify under the signing certificate's SIGN_RESPONSE key.

Throws