val ks = KeyStore.getInstance(JCSP.HD_STORE_NAME, JCSP.PROVIDER_NAME);
            System.setProperty("ru.CryptoPro.reprov.enableAIAcaIssuers", "true"); 
            System.setProperty( "com.sun.security.enableCRLDP", "true" );
            System.setProperty( "com.ibm.security.enableCRLDP", "true" );
            ks.load(null, null);

            var certs: Array<Certificate>? = ks.getCertificateChain(alias);
            
            var signature = CAdESSignature(false);
            val passwordParameter = JCPProtectionParameter(password.toCharArray())
            val privateKey = ks.getEntry(alias, passwordParameter) as JCPPrivateKeyEntry
            
            val cert = getCertificate(alias, ks);                        
            Single.fromCallable {    
                signature.addSigner(JCP.PROVIDER_NAME,
                    null, null,
                    privateKey.privateKey,
                    certs!!.toList(),
                    CAdESType.CAdES_BES,
                    null,
                    false);
                }.subscribeOn(Schedulers.io())
                .subscribe({s -> s},{throwable -> Log.e("Error", "Throwable " + throwable)});
        
            
            val out = ByteArrayOutputStream();
            signature.open(out);
            signature.update(bytes);
            signature.close();
            val signedCode = out.toByteArray();
            return signedCode;

W/JCP     ( 3184): ru.CryptoPro.AdES.certificate.CertificateChainBuilderImpl.build :: unable to find valid certification path to requested target
W/JCP     ( 3184): ru.CryptoPro.reprov.certpath.JCPCertPathBuilderException: unable to find valid certification path to requested target
W/JCP     ( 3184): 	at ru.CryptoPro.reprov.certpath.SunCertPathBuilder.engineBuild(Unknown Source:190)
W/JCP     ( 3184): 	at ru.CryptoPro.AdES.certificate.CertificateChainBuilderImpl$1CertPathBuilderWrapper.build(Unknown Source:35)
W/JCP     ( 3184): 	at ru.CryptoPro.AdES.certificate.CertificateChainBuilderImpl.build(Unknown Source:311)
W/JCP     ( 3184): 	at ru.CryptoPro.AdES.certificate.CertificateChainBuilderImpl.build(Unknown Source:98)
W/JCP     ( 3184): 	at ru.CryptoPro.CAdES.cl_1.addSigner(Unknown Source:266)
W/JCP     ( 3184): 	at ru.CryptoPro.CAdES.cl_1.addSigner(Unknown Source:22)
W/JCP     ( 3184): 	at ru.CryptoPro.CAdES.cl_1.addSigner(Unknown Source:19)
W/JCP     ( 3184): 	at ru.CryptoPro.CAdES.cl_1.addSigner(Unknown Source:15)
W/JCP     ( 3184): 	at ru.croc.mobile.crpt.business.MainActivity$CryptoProNativeApiImpl$sign$1.call(MainActivity.kt:226)
W/JCP     ( 3184): 	at ru.croc.mobile.crpt.business.MainActivity$CryptoProNativeApiImpl$sign$1.call(MainActivity.kt:60)
W/JCP     ( 3184): 	at io.reactivex.internal.operators.single.SingleFromCallable.subscribeActual(SingleFromCallable.java:44)
W/JCP     ( 3184): 	at io.reactivex.Single.subscribe(Single.java:3603)
W/JCP     ( 3184): 	at io.reactivex.internal.operators.single.SingleSubscribeOn$SubscribeOnObserver.run(SingleSubscribeOn.java:89)
W/JCP     ( 3184): 	at io.reactivex.Scheduler$DisposeTask.run(Scheduler.java:578)
W/JCP     ( 3184): 	at io.reactivex.internal.schedulers.ScheduledRunnable.run(ScheduledRunnable.java:66)
W/JCP     ( 3184): 	at io.reactivex.internal.schedulers.ScheduledRunnable.call(ScheduledRunnable.java:57)
W/JCP     ( 3184): 	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
W/JCP     ( 3184): 	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:301)
W/JCP     ( 3184): 	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167)
W/JCP     ( 3184): 	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)
W/JCP     ( 3184): 	at java.lang.Thread.run(Thread.java:919)
E/@@@@    ( 3184): Throwable Error occurred during building the certification path for the target:
E/@@@@    ( 3184): 	serial: 2ff0d6900f3acdd8e43589b2ca5c280eb
E/@@@@    ( 3184): 	subject: <subject>
E/@@@@    ( 3184): 	issuer: CN="Тестовый подчиненный УЦ ООО \"КРИПТО-ПРО\" ГОСТ 2012 (УЦ 2.0)", O="ООО \"КРИПТО-ПРО\"", STREET=ул. Сущёвский вал д. 18, L=Москва, ST=77 Москва, C=RU, OID.1.2.643.3.131.1.1=#120C303037373137313037393931, OID.1.2.643.100.1=#120D31303337373030303835343434, EMAILADDRESS=info@cryptopro.ru
E/@@@@    ( 3184): 	not before: Mon Mar 22 09:12:30 GMT+03:00 2021
E/@@@@    ( 3184): 	not after: Tue Jun 22 09:22:30 GMT+03:00 2021
E/@@@@    ( 3184): 	signature provider: JCP
E/@@@@    ( 3184): 	validation date: null
E/@@@@    ( 3184): 	native implementation: false
E/@@@@    ( 3184): : unable to find valid certification path to requested target; error codes: [33] 'PKIX failure: invalid parameters of certificate',

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>    
    <debug-overrides> 
        <trust-anchors> 
            <!-- Trust user added CAs while debuggable only -->
            <certificates src="user" /> 
        </trust-anchors>    
    </debug-overrides>  
    <domain-config cleartextTrafficPermitted="true">
        <domain includeSubdomains="true">testca2012.cryptopro.ru</domain>
    </domain-config>
</network-security-config>