diff --git a/FirebaseAdmin/FirebaseAdmin/AppOptions.cs b/FirebaseAdmin/FirebaseAdmin/AppOptions.cs
index d7f28133..81ce9ca6 100644
--- a/FirebaseAdmin/FirebaseAdmin/AppOptions.cs
+++ b/FirebaseAdmin/FirebaseAdmin/AppOptions.cs
@@ -38,6 +38,7 @@ internal AppOptions(AppOptions options)
             this.ProjectId = options.ProjectId;
             this.ServiceAccountId = options.ServiceAccountId;
             this.HttpClientFactory = options.HttpClientFactory;
+            this.TokenCertUrl = options.TokenCertUrl;
         }
 
         /// <summary>
@@ -66,5 +67,10 @@ internal AppOptions(AppOptions options)
         /// Gets or sets the HttpClientFactory to use when making Firebase requests.
         /// </summary>
         public HttpClientFactory HttpClientFactory { get; set; }
+
+        /// <summary>
+        /// Gets or sets the TokenCertUrl to use custom public key url.
+        /// </summary>
+        public string TokenCertUrl { get; set; }
     }
 }
diff --git a/FirebaseAdmin/FirebaseAdmin/Auth/Jwt/FirebaseTokenVerifier.cs b/FirebaseAdmin/FirebaseAdmin/Auth/Jwt/FirebaseTokenVerifier.cs
index 50fad5f7..85ab9762 100644
--- a/FirebaseAdmin/FirebaseAdmin/Auth/Jwt/FirebaseTokenVerifier.cs
+++ b/FirebaseAdmin/FirebaseAdmin/Auth/Jwt/FirebaseTokenVerifier.cs
@@ -102,8 +102,11 @@ internal static FirebaseTokenVerifier CreateIdTokenVerifier(
                     "Must initialize FirebaseApp with a project ID to verify ID tokens.");
             }
 
+            var tokenCertUrl = string.IsNullOrEmpty(app.Options.TokenCertUrl)
+                ? IdTokenCertUrl
+                : app.Options.TokenCertUrl;
             var keySource = new HttpPublicKeySource(
-                IdTokenCertUrl, SystemClock.Default, app.Options.HttpClientFactory);
+                tokenCertUrl, SystemClock.Default, app.Options.HttpClientFactory);
             var args = CreateIdTokenVerifierArgs();
             args.ProjectId = projectId;
             args.TenantId = tenantId;