THPDFTimestampInfo Record
Reports the parsed RFC 3161 timestamp token belonging to a signature timestamp or document timestamp
Declaration
THPDFTimestampInfo= record
Kind: THPDFTimestampKind;
Status: THPDFSignatureVerifyStatus;
PolicyOID: AnsiString;
HashAlgorithm: AnsiString;
MessageImprintHex: AnsiString;
SerialNumberHex: AnsiString;
GenerationTime: TDateTime;
AccuracyMicroseconds: Int64;
Ordering: boolean;
NonceHex: AnsiString;
TSAName: AnsiString;
SignerName: AnsiString;
SubjectDN: AnsiString;
IssuerDN: AnsiString;
CertificateSerialNumberHex: AnsiString;
DigestConsistencyIssue: THPDFCMSDigestConsistencyIssue;
end;Unit
HPDFSignVerify
Fields
| Field | Purpose |
|---|---|
Kind | None, a signature timestamp attribute or an ETSI.RFC3161 document timestamp |
Status | Token verification verdict, reported quite separately from the primary signature status |
PolicyOID | TSA policy OID that the TSTInfo declares |
HashAlgorithm | Hash algorithm employed for the message imprint |
MessageImprintHex | Hash of the timestamped bytes, encoded in hex |
SerialNumberHex | Timestamp token serial number, encoded in hex |
GenerationTime | The genTime at which the TSA stamped the token |
AccuracyMicroseconds | Accuracy declared for the generation time, in microseconds |
Ordering | Contents of the TSTInfo ordering flag |
NonceHex | Request nonce that the TSA echoed back, encoded in hex |
TSAName | Time stamping authority name taken from the token |
SignerName | Common name within the TSA certificate subject |
SubjectDN / IssuerDN | Rendered distinguished names for the TSA certificate |
CertificateSerialNumberHex | TSA certificate serial number, encoded in hex |
DigestConsistencyIssue | Digest consistency problem found whilst verifying the token; dciNone when clean |
Usage notes
Kindtells a signature timestamp attribute apart from an ETSI.RFC3161 document timestamp, whose token is the primary signature itselfStatuscarries the token verdict apart from the primary signature, so a broken timestamp cannot silently alter the signature verdict- Batch validation can restore a cached token verdict into this record rather than re-verifying the embedded signature timestamp