private byte[] verify(byte[] data, final X509Certificate senderCert) {

        //Читаем и проверяем содержимое
//        final ru.CryptoPro.JCP.tools.Decoder decoder = new ru.CryptoPro.JCP.tools.Decoder();
//        byte[] decData;
//        try {
//            decData = decoder.decodeBuffer(new ByteArrayInputStream(data));
//        } catch (IOException e) {
//            throw new RuntimeException("Input read error.");
//        }
//
//        final Asn1BerDecodeBuffer asnBuf = new Asn1BerDecodeBuffer(decData);
        final Asn1BerDecodeBuffer asnBuf = new Asn1BerDecodeBuffer(data);
        final ContentInfo all = new ContentInfo();
        try {
            all.decode(asnBuf);
        } catch (Exception e) {
            throw new RuntimeException("Couldn't read input data.");
        }

        if (!new OID(STR_CMS_OID_SIGNED).eq(all.contentType.value)) {
            throw new RuntimeException("Not supported");
        } // if

        final SignedData cms = (SignedData) all.content;
        final byte[] text;

        if (cms.encapContentInfo.eContent != null) {
            text = cms.encapContentInfo.eContent.value;
        } else {
            throw new RuntimeException("No content for verify");
        }


        OID digestOid = null;
        final DigestAlgorithmIdentifier digestAlgorithmIdentifier =
                new DigestAlgorithmIdentifier(new OID(DIGEST_OID).value);

        for (int i = 0; i < cms.digestAlgorithms.elements.length; i++) {
            if (cms.digestAlgorithms.elements[i].algorithm
                    .equals(digestAlgorithmIdentifier.algorithm)) {
                digestOid = new OID(cms.digestAlgorithms.elements[i].algorithm.value);
                break;
            } // if
        } // for

        if (digestOid == null) {
            throw new RuntimeException("Unknown digest");
        } // if

        X509Certificate cert;

        if (senderCert != null) {
            cert = senderCert;
        } else if (cms.certificates != null) {

            //Проверка на вложенном сертификате
            final Asn1BerEncodeBuffer encBuf = new Asn1BerEncodeBuffer();
            try {
                cms.certificates.elements[0].encode(encBuf);
            } catch (Exception e) {
                throw new RuntimeException("Couldn't encode data on EncodeBuffer.");
            }

            try {
                final CertificateFactory cf = CertificateFactory.getInstance("X.509");
                cert = (X509Certificate) cf.generateCertificate(encBuf.getInputStream());
            } catch (Exception e) {
                throw new RuntimeException("Couldn't recreate certificate from cms.");
            }
        } else {
            throw new RuntimeException("Certificate not found!");
        }
        final SignerInfo info = cms.signerInfos.elements[0];
        if (!digestOid.equals(new OID(info.digestAlgorithm.algorithm.value))) {
            throw new RuntimeException("Not signed on certificate.");
        } // if
        // Проверяем подпись.
        Signature signature;
        try {
            signature = Signature.getInstance(GOST_EL_SIGN_NAME, PROVIDER_NAME);
            signature.initVerify(cert);
            signature.update(text);
        } catch (Exception e) {
            e.printStackTrace();
            throw new RuntimeException("Couldn't recreate the sign from cms.");
        }
        try {
            if (!signature.verify(info.signature.value)) throw new RuntimeException("Sign is invalid!");
        } catch (SignatureException e) {
            throw new RuntimeException("Signature error.");
        }


        return text;
    }