public static byte[] sign(KeyStore keyStore, String alias, char[] password, byte[] data) throws Exception {

        keyStore.load(null, null);

        PrivateKey privateKey = (PrivateKey)
                keyStore.getKey(alias, password);

        System.setProperty("com.sun.security.enableCRLDP", "true");
        System.setProperty("com.ibm.security.enableCRLDP", "true");

        System.setProperty("com.sun.security.enableAIAcaIssuers", "true");
        System.setProperty("ru.CryptoPro.reprov.enableAIAcaIssuers", "true");

        Certificate[] certificates = keyStore
                .getCertificateChain(alias);

        List<X509Certificate> chain =
                new ArrayList<X509Certificate>();

        for (Certificate cert : certificates) {
            chain.add((X509Certificate) cert);
        }

        CAdESSignature cAdESSignature = new CAdESSignature(true);

        cAdESSignature.addSigner(
                JCP.PROVIDER_NAME, // signature provider // провайдер подписи
                JCP.GOST_DIGEST_2012_256_OID,
                JCP.GOST_PARAMS_EXC_2012_256_KEY_OID,
                privateKey, // signing key // ключ подписанта
                chain,      // signing certificate chain // цепочка сертификатов подписанта
                CAdESType.CAdES_BES,
                null,
                false,
                null,
                null,
                null, // no CRL files
                true  // add the signing certificate chain to the signature // добавить цепочку подписанта в подпись
        );

        ByteArrayOutputStream signatureStream
                = new ByteArrayOutputStream();

        try {
            cAdESSignature.open(signatureStream);
            cAdESSignature.update(data);
            cAdESSignature.close();
        } finally {
            signatureStream.close();
        }

        return signatureStream.toByteArray();
    }