cms: unable to verify the embedded certificate

I try to use cryptographic-message-syntax crate to verify a signature. While I can verify the signature proper, I cannot verify the validity of the embedded certificate. My scenario is a bit more complex (includes an intermediate CA), I created an [example](https://github.com/sa2ajj/try-cms-2) where the problem can be seen.

Start by reproducing the failure in the linked try-cms-2 example, focusing on the embedded certificate and its intermediate-CA scenario. Trace the cryptographic-message-syntax crate's certificate-validation entry point and compare signature verification with certificate validity verification. Done means the embedded certificate's validity can be verified for this scenario.

Written by the indexing model from the issue text.