document pkcs7 signature