Ok, thanks the help. Extracting the digest didn't work for me. But I was finally able to contact a member of that third party who had the knowledge of the procedure they use. So after some basic questions, I've asked that person "sure you sign that data with that key you sent us"? The answer was: "no, a different one". -- Best Regards, Nikolay Kudryavtsev