finished response signature verification