public class MCSoapInspecotor : IClientMessageInspector, IDispatchMessageInspector, IParameterInspector 
{
    ...
}

public class MCInterceptorBehavior : IEndpointBehavior
{

        public MCSoapInspecotor Inspector { get; set; }
        public MCInterceptorBehavior(MCSoapInspecotor inspector)
        {
            Inspector = inspector;
        }

        public void ApplyClientBehavior(ServiceEndpoint serviceEndpoint, System.ServiceModel.Dispatcher.ClientRuntime behavior)
        {
            behavior.MessageInspectors.Add(Inspector);
            foreach (ClientOperation op in behavior.Operations)
                op.ParameterInspectors.Add(Inspector);
        }

        public void ApplyDispatchBehavior(ServiceEndpoint serviceEndpoint, System.ServiceModel.Dispatcher.EndpointDispatcher endpointDispatcher)
        {
            endpointDispatcher.DispatchRuntime.MessageInspectors.Add(Inspector);
            foreach (DispatchOperation op in endpointDispatcher.DispatchRuntime.Operations)
                op.ParameterInspectors.Add(Inspector);
        }
        ...
}

...
            ServiceEndpoint endpoint = new ServiceEndpoint(contract);
            endpoint.Behaviors.Add(new MCInterceptorBehavior(new MCSoapInspecotor()));
            ChannelFactory<misInterface> factory = new ChannelFactory<misInterface>(endpoint);
...

        private void InitWCF()
        {
            ServiceEndpoint endpoint = CreateServiceEndpoint();
            ChannelFactory<misInterface> factory = new ChannelFactory<misInterface>(endpoint);
            factory.Credentials.ClientCertificate.Certificate = Vars.ClientCertificate;
            factory.Credentials.ServiceCertificate.DefaultCertificate = Vars.ServiceCertificate;
            factory.Credentials.ServiceCertificate.Authentication.CertificateValidationMode = X509CertificateValidationMode.None;
            factory.Credentials.ServiceCertificate.Authentication.RevocationMode = X509RevocationMode.NoCheck;
            _client = factory.CreateChannel();

            _transportHeader = new transportHeader { authInfo = new authInfo { clientEntityId = Vars.ClientEntityId } };
            Message = new Send { MessageData = new MessageDataSendRequest { AppData = new AppDataSendRequest { messageSourceToken = _hospitalFederalToken } } };
            Command = Message.MessageData.AppData;
        }

        /// <summary>
        /// Возвращает конечную точку сервиса 
        /// </summary>
        /// <returns></returns>
        private ServiceEndpoint CreateServiceEndpoint()
        {
            ContractDescription constract = ContractDescription.GetContract(typeof(misInterface));

            string serverCommonName = Vars.ServiceCertificate.GetNameInfo(X509NameType.SimpleName, false);
            /// DNS имя не совпадает с CommonName из сертификата сервера. Поэтому явно задаем доверие.
            EndpointAddress endpointAddress = new EndpointAddress(new Uri(Vars.EnvironmentAddress), EndpointIdentity.CreateDnsIdentity(serverCommonName));
            ServiceEndpoint endpoint = new ServiceEndpoint(constract);
            endpoint.Behaviors.Add(new MCInterceptorBehavior(new MCSoapInspecotor()));
            endpoint.Address = endpointAddress;
            endpoint.Binding = CreateBinding();
            endpoint.Contract.ProtectionLevel = ProtectionLevel.Sign;

            return endpoint;
        }

        /// <summary>
        /// Сформировать привязку конечной точки
        /// </summary>
        /// <returns></returns>
        private Binding CreateBinding()
        {
            /// Создаём болванку привязки
            BasicHttpBinding basicBinding = new BasicHttpBinding();
            basicBinding.Security.Mode = BasicHttpSecurityMode.Message;
            basicBinding.Security.Message.ClientCredentialType = BasicHttpMessageCredentialType.Certificate;
            basicBinding.Security.Message.AlgorithmSuite = GostAlgorithmSuite.BasicGostObsolete;
            basicBinding.Security.Transport.ClientCredentialType = HttpClientCredentialType.None;
            basicBinding.MaxReceivedMessageSize = 2147483647;
            CustomBinding binding = new CustomBinding(basicBinding);
            binding.Elements.Remove<TextMessageEncodingBindingElement>();
            binding.Elements.Remove<HttpTransportBindingElement>();
            /// Не включаем метку времени в заголовок Security
            binding.Elements.Find<AsymmetricSecurityBindingElement>().IncludeTimestamp = false;
            /// Говорим WCF, что в сообщении не нужно искать метку времени и nonce.
            binding.Elements.Find<AsymmetricSecurityBindingElement>().LocalClientSettings.DetectReplays = false;
            binding.Elements.Add(new TextMessageEncodingBindingElement(MessageVersion.Soap12WSAddressing10, Encoding.UTF8));
            binding.Elements.Add(HttpsTransportBindingElement());
            binding.Elements.Find<TransportBindingElement>().MaxReceivedMessageSize = int.MaxValue;
            return binding;
        }

Server stack trace: 
   в System.ServiceModel.Security.MessageSecurityProtocol.VerifyIncomingMessage(Message& message, TimeSpan timeout, SecurityProtocolCorrelationState[] correlationStates)
   в System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.ProcessReply(Message reply, SecurityProtocolCorrelationState correlationState, TimeSpan timeout)
   в System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.Request(Message message, TimeSpan timeout)
   в System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout)
   в System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   в System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   в System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)