public File sign(File document, String containerName, byte[] pfxFile) {
        try {
            var keyStore = KeyStore.getInstance(JCSP.PFX_STORE_NAME, JCSP.PROVIDER_NAME);
            keyStore.load(new ByteArrayInputStream(pfxFile), containerPassword.toCharArray());

            var alias = findAlias(keyStore, containerName);
            JCPProtectionParameter parameter = new JCPProtectionParameter(containerPassword.toCharArray());
            JCPPrivateKeyEntry entry = (JCPPrivateKeyEntry) keyStore.getEntry(alias, parameter);
            var certificates = getX509Certificates(keyStore.getCertificateChain(alias));
            byte[] data = getRawDigest(document);

            byte[] signature = createCAdESBES(entry.getPrivateKey(), certificates, data);

            var signatureFile = new File(document.getPath().replaceAll(".xml", ".sgn"));
            try (FileOutputStream outputStream = new FileOutputStream(signatureFile)) {
                outputStream.write(signature);
            }
            return signatureFile;
        } catch (ServiceException se) {
            throw se;
        } catch (Exception e) {
            log.error("Ошибка при подписании документа: {}", e.getMessage());
            throw new ServiceException(ErrorType.CRYPTO_PRO_ERROR, "Не удалось подписать документ");
        }
    }

    private byte[] createCAdESBES(PrivateKey privateKey, List<X509Certificate> chain, byte[] data) throws Exception {
        CAdESSignature cadesSignature = new CAdESSignature(true, true);
        cadesSignature.addSigner(
                JCSP.PROVIDER_NAME,
                null,
                null,
                privateKey,
                chain,
                CAdESType.CAdES_BES,
                null,
                false,
                null,
                null,
                null,
                // Добавляем цепочку сертификатов в подпись
                true
        );

        try (ByteArrayOutputStream signatureStream = new ByteArrayOutputStream()) {
            cadesSignature.open(signatureStream);
            cadesSignature.update(data);
            cadesSignature.close();
            return signatureStream.toByteArray();
        }
    }


    private byte[] getRawDigest(File document) throws Exception {
        var md = MessageDigest.getInstance(JCP.GOST_DIGEST_2012_256_NAME, JCSP.PROVIDER_NAME);
        return md.digest(FileUtils.readFileToByteArray(document));
    }

    private String findAlias(KeyStore keyStore, String containerName) throws KeyStoreException {
        var aliases = keyStore.aliases();
        while (aliases.hasMoreElements()) {
            String alias = aliases.nextElement();
            if (alias.equals(containerName)) {
                return alias;
            }
        }
        return null;
    }

    private List<X509Certificate> getX509Certificates(Certificate[] chain) {
        List<X509Certificate> result = new ArrayList<>();
        for (Certificate cert : chain) {
            result.add((X509Certificate) cert);
        }
        return result;
    }
}