pkcs7 with embedded check