generate a signed object that for a CMS Signed Data
object using the given provider - if encapsulate is true a copy
of the message will be included in the signature.
verify that the given certificate succesfully handles the signature
associated with this signer and, if a signingTime attribute is
available, that the certificate was valid at the time the
signature was generated.