HPDFVerifyHeadlessTimestampTokenForImprint

procedure HPDFVerifyHeadlessTimestampTokenForImprint(const MessageImprint, TokenDER: SysUtils.TBytes;
  Digest: THPDFHeadlessTimestampDigest; const Options: THPDFHeadlessTimestampOptions);

Authenticates an existing DER TimeStampToken against the exact SHA256, SHA384 or SHA512 digest bytes supplied and the explicit TSA trust configuration

Offline verification checks the token CMS signature, certificate binding, TSA chain, critical EKU, the actual imprint digest selection and the configured certificate revocation evidence

The original request nonce is not available in this API; use HPDFVerifyHeadlessTimestampResponseForImprint when authenticating a fresh response against its request

See Native RFC3161 timestamps for transport and trust configuration