Verifying the signature of a notification

Link https://merchant.alikassa.com/cabinet/form/setting-api-certs generate "API certificate for notifications", save the archive, unpack

Wrap all GET data in json (in the same order) and sign

$verif = openssl_verify(json_encode([
    'type' => $_GET['type'],
    'id' => (int) $_GET['id'],
    'order_id' => $_GET['order_id'],
    'payment_status' => $_GET['payment_status'],
    'amount' => $_GET['amount'],
    'payment_amount' => $_GET['payment_amount'],
    'commission_amount' => $_GET['commission_amount'],
    'is_partial_payment' => $_GET['is_partial_payment'],
    'account' => $_GET['account'],
    'service' => $_GET['service'],
    'desc' => $_GET['desc'],
]),
    base64_decode($_GET['sign']),
    file_get_contents('./certs/notification/public.pem'));

if (!$verif) {

    throw new \Exception;
}