This is the same test as rsa-pss-sha256.pem except instead of specifying the SPKI using rsaEncryption it is specified using rsaPss along with parameters that match those of the signature algorithm. $ openssl asn1parse -i < [PUBLIC KEY] 0:d=0 hl=4 l= 342 cons: SEQUENCE 4:d=1 hl=2 l= 65 cons: SEQUENCE 6:d=2 hl=2 l= 9 prim: OBJECT :rsassaPss 17:d=2 hl=2 l= 52 cons: SEQUENCE 19:d=3 hl=2 l= 15 cons: cont [ 0 ] 21:d=4 hl=2 l= 13 cons: SEQUENCE 23:d=5 hl=2 l= 9 prim: OBJECT :sha256 34:d=5 hl=2 l= 0 prim: NULL 36:d=3 hl=2 l= 28 cons: cont [ 1 ] 38:d=4 hl=2 l= 26 cons: SEQUENCE 40:d=5 hl=2 l= 9 prim: OBJECT :mgf1 51:d=5 hl=2 l= 13 cons: SEQUENCE 53:d=6 hl=2 l= 9 prim: OBJECT :sha256 64:d=6 hl=2 l= 0 prim: NULL 66:d=3 hl=2 l= 3 cons: cont [ 2 ] 68:d=4 hl=2 l= 1 prim: INTEGER :20 71:d=1 hl=4 l= 271 prim: BIT STRING -----BEGIN PUBLIC KEY----- MIIBVjBBBgkqhkiG9w0BAQowNKAPMA0GCWCGSAFlAwQCAQUAoRwwGgYJKoZIhvcN AQEIMA0GCWCGSAFlAwQCAQUAogMCASADggEPADCCAQoCggEBAJ+eocEuecvSRuYF 5E0C15v0OB0iXT/5BAoM7TDELaoIr/kHS9CeTO20DW1Cu2YWbeaREuU9B4yXCBDQ b4Vxc1Gd6wTjKeMhEhS1qEi9Kri9AwGkV/2bmak/jsOiz3ZMJb9SaSodN8pasQhm 8NWyBSBLBa6ekA53Uj1SNYn3dkH2Hvn3UULhfHpmhrudDikUoM4kAedCRyg9M0bI dXIFHEE8hlIhY9p3RV8NQD88pVNvqLmLq5jd2Qq73D9if6oEHQMw2EUP26v7+yzW EHPhrnfhCMxN/vbKcm51kYtmi65xsMAQmbP26nOusGitKcx/M/5g8GwdmUiGpegE RdIllF0CAwEAAQ== -----END PUBLIC KEY----- $ openssl asn1parse -i < [ALGORITHM] 0:d=0 hl=2 l= 65 cons: SEQUENCE 2:d=1 hl=2 l= 9 prim: OBJECT :rsassaPss 13:d=1 hl=2 l= 52 cons: SEQUENCE 15:d=2 hl=2 l= 15 cons: cont [ 0 ] 17:d=3 hl=2 l= 13 cons: SEQUENCE 19:d=4 hl=2 l= 9 prim: OBJECT :sha256 30:d=4 hl=2 l= 0 prim: NULL 32:d=2 hl=2 l= 28 cons: cont [ 1 ] 34:d=3 hl=2 l= 26 cons: SEQUENCE 36:d=4 hl=2 l= 9 prim: OBJECT :mgf1 47:d=4 hl=2 l= 13 cons: SEQUENCE 49:d=5 hl=2 l= 9 prim: OBJECT :sha256 60:d=5 hl=2 l= 0 prim: NULL 62:d=2 hl=2 l= 3 cons: cont [ 2 ] 64:d=3 hl=2 l= 1 prim: INTEGER :20 -----BEGIN ALGORITHM----- MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIBBQChHDAaBgkqhkiG9w0BAQgw DQYJYIZIAWUDBAIBBQCiAwIBIA== -----END ALGORITHM----- -----BEGIN DATA----- x/UnD8pyX5vRn1GajXzKPMXAeQJAKfO65RD5sCFA/iOJCOT2wY8HqJxofIaEZpsfHbK6+SUaPIK frMtJMIThbsnijViGgHSl1iIWZ91uUo0W/iyfPbTPr2xNzoyEOa84zqqqnOLsrnvI9KWlXjv5bf nNV1xPnLMnlRuM3+QIcWg= -----END DATA----- $ openssl asn1parse -i < [SIGNATURE] 0:d=0 hl=4 l= 257 prim: BIT STRING -----BEGIN SIGNATURE----- A4IBAQAhgPL8PV86dM9W4p1s7IWu8+9oXpPnFgutfKffNrPRny+7zUmJFER/JUDB 7gnb4qiDRqKftRIpizyrZb0M4Vrhq1CyINHM1anqinZESRy8npVvhrYv4QiHZnYX vXtDjgBg3Rw2DufTOKgxs+nX8a050aHsuMulTRCwR6NuHkChJlJfg6p0b1losgcL jKlu7EqTUUkY7Mt0WyCobxIKGbgrSVJsjV8La6rPh3LpA3d9i0Ik1HkyM1w+7utn h2eT/FKO8W1BtB8haiyuhatuZ1c/2uttLBSZa8hK/2W4YuomUEoWz8JIP9xXQkoq u0P2zB7MXW5jPJwpUX0fKXqFNSry -----END SIGNATURE-----