The major AAM release is live! For questions or concerns, visit the Release Page. 
service.jwt.public_cert_path
Less than 1 minute
Syntax
service.jwt.public_cert_path = "string"
The default value: null
Definition
Absolute path to the public certificate that pairs with private certification used to issue the provided JWT token. The signing algorithm should be RS256, RS384, or RS512.
In the example below, we point to the public certificate on the server.
[aam]
service.jwt.signing_algorithm = "rs256"
service.jwt.public_cert_path = "/usr/private/signing_cert.key.pub"