HPDFVerifyHeadlessTimestampResponse

function HPDFVerifyHeadlessTimestampResponse(const SignatureValue, RequestDER,
  ResponseDER: SysUtils.TBytes; const Options: THPDFHeadlessTimestampOptions): SysUtils.TBytes;

Returns the authenticated RFC3161 CMS token after verifying the response status, request nonce, signature-value imprint, TSA chain, critical timestamp EKU, ESS binding and optional CRL evidence

RequestDER must be the nonce-bearing request generated for SignatureValue; malformed or mismatched requests, responses or trust evidence raise EHPDFHeadlessTimestampError

Explicitly trusted CA roots are mandatory and trailing DER bytes are rejected