This is the same as rsa-pss-sha256.pem, except the signature was generated with a salt length of 33 instead of 32, while the algorithm still reports the standard value of 32. The public key in SPKI form: $ openssl pkey -in key.pem -pubout -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn56hwS55y9JG5gXkTQLX m/Q4HSJdP/kECgztMMQtqgiv+QdL0J5M7bQNbUK7ZhZt5pES5T0HjJcIENBvhXFz UZ3rBOMp4yESFLWoSL0quL0DAaRX/ZuZqT+Ow6LPdkwlv1JpKh03ylqxCGbw1bIF IEsFrp6QDndSPVI1ifd2QfYe+fdRQuF8emaGu50OKRSgziQB50JHKD0zRsh1cgUc QTyGUiFj2ndFXw1APzylU2+ouYurmN3ZCrvcP2J/qgQdAzDYRQ/bq/v7LNYQc+Gu d+EIzE3+9spybnWRi2aLrnGwwBCZs/bqc66waK0pzH8z/mDwbB2ZSIal6ARF0iWU XQIDAQAB -----END PUBLIC KEY----- The signing algorithm: $ openssl asn1parse -i < [ALGORITHM] 0:d=0 hl=2 l= 65 cons: SEQUENCE 2:d=1 hl=2 l= 9 prim: OBJECT :rsassaPss 13:d=1 hl=2 l= 52 cons: SEQUENCE 15:d=2 hl=2 l= 15 cons: cont [ 0 ] 17:d=3 hl=2 l= 13 cons: SEQUENCE 19:d=4 hl=2 l= 9 prim: OBJECT :sha256 30:d=4 hl=2 l= 0 prim: NULL 32:d=2 hl=2 l= 28 cons: cont [ 1 ] 34:d=3 hl=2 l= 26 cons: SEQUENCE 36:d=4 hl=2 l= 9 prim: OBJECT :mgf1 47:d=4 hl=2 l= 13 cons: SEQUENCE 49:d=5 hl=2 l= 9 prim: OBJECT :sha256 60:d=5 hl=2 l= 0 prim: NULL 62:d=2 hl=2 l= 3 cons: cont [ 2 ] 64:d=3 hl=2 l= 1 prim: INTEGER :20 -----BEGIN ALGORITHM----- MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIBBQChHDAaBgkqhkiG9w0BAQgw DQYJYIZIAWUDBAIBBQCiAwIBIA== -----END ALGORITHM----- -----BEGIN DATA----- x/UnD8pyX5vRn1GajXzKPMXAeQJAKfO65RD5sCFA/iOJCOT2wY8HqJxofIaEZpsfHbK6+SUaPIK frMtJMIThbsnijViGgHSl1iIWZ91uUo0W/iyfPbTPr2xNzoyEOa84zqqqnOLsrnvI9KWlXjv5bf nNV1xPnLMnlRuM3+QIcWg= -----END DATA----- The signature was generated with: $ openssl dgst -sign key.pem -sha256 -sigopt rsa_padding_mode:pss \ -sigopt rsa_pss_saltlen:33 < [DATA] > [SIGNATURE] Then the signature was wrapped in a BIT STRING. $ openssl asn1parse -i < [SIGNATURE] 0:d=0 hl=4 l= 257 prim: BIT STRING -----BEGIN SIGNATURE----- A4IBAQB4R+AnrWUH+TvyBU3yR1GP1ghodbwUZdyJfG1rqzEqpY/MJtsd1YM9bC9q FqHao1+idLj+WSl91hbtZAEtNb0TDdXkO+iattPYsTBAeLm70A7DbqwM7s/1rTp0 KJ4QFOJe05wYO+p/zHZ4Oiyhx2bCx+8J1FLlYEtwR0NhwRwPflVO7TNZC1l40iqk iyxsJrXsibuFnFnBe6BytBdlKF/CHFuve6z5aLauuuQtA17I6YRZ4cdKceD9I3Hs NVhe+V1V10YoMDx3AywQTnaM+Au+VoxHU6oh9KP5lrrzBhPZPDtzfF++4Ag2Vd2O GFvPoL8xTp3S8QG5iVs90BkW8GvL -----END SIGNATURE-----