From: Jochen Sprickerhof <jspricke@debian.org>
Date: Sun, 26 Aug 2018 09:25:29 +0200
Subject: Wrap algorithm id into ASN1ObjectIdentifier

---
 .../main/java/com/itextpdf/text/pdf/security/SignaturePolicyInfo.java  | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/itext/src/main/java/com/itextpdf/text/pdf/security/SignaturePolicyInfo.java b/itext/src/main/java/com/itextpdf/text/pdf/security/SignaturePolicyInfo.java
index 9f0b1f8..3466082 100644
--- a/itext/src/main/java/com/itextpdf/text/pdf/security/SignaturePolicyInfo.java
+++ b/itext/src/main/java/com/itextpdf/text/pdf/security/SignaturePolicyInfo.java
@@ -43,6 +43,7 @@
 package com.itextpdf.text.pdf.security;
 
 import com.itextpdf.text.pdf.codec.Base64;
+import org.bouncycastle.asn1.ASN1ObjectIdentifier;
 import org.bouncycastle.asn1.DERIA5String;
 import org.bouncycastle.asn1.DERObjectIdentifier;
 import org.bouncycastle.asn1.DEROctetString;
@@ -118,7 +119,7 @@ public class SignaturePolicyInfo {
         SigPolicyQualifiers qualifiers = new SigPolicyQualifiers(new SigPolicyQualifierInfo[] {spqi});
 
         signaturePolicyIdentifier = new SignaturePolicyIdentifier(new SignaturePolicyId(DERObjectIdentifier.getInstance(new DERObjectIdentifier(this.policyIdentifier.replace("urn:oid:", ""))),
-                new OtherHashAlgAndValue(new AlgorithmIdentifier(algId), new DEROctetString(this.policyHash)), qualifiers));
+                new OtherHashAlgAndValue(new AlgorithmIdentifier(new ASN1ObjectIdentifier(algId)), new DEROctetString(this.policyHash)), qualifiers));
 
         return signaturePolicyIdentifier;
     }
