HPDFRequestHeadlessTimestampForImprint

function HPDFRequestHeadlessTimestampForImprint(const MessageImprint: SysUtils.TBytes;
  Digest: THPDFHeadlessTimestampDigest; const Options: THPDFHeadlessTimestampOptions): SysUtils.TBytes;

Creates a fresh nonce-bearing RFC3161 request for the exact digest supplied, invokes the application-owned transport, validates its complete response and returns the authenticated CMS TimeStampToken

Options.Transport and explicit trusted TSA CA roots are required; the callback receives DER request bytes and returns DER response bytes whilst controlling its own HTTP authentication, TLS policy, deadlines and network cancellation

The original imprint, selected digest, fresh nonce, TSA CMS signature, certificate binding, chain, EKU, configured revocation evidence, response budget and cancellation are all checked before a token comes back

See Native RFC3161 timestamps for transport and trust configuration