HPDFRequestHeadlessTimestampForImprint

function HPDFRequestHeadlessTimestampForImprint(const MessageImprint: SysUtils.TBytes;
  Digest: THPDFHeadlessTimestampDigest; const Options: THPDFHeadlessTimestampOptions): SysUtils.TBytes;

Creates a fresh nonce-bearing RFC3161 request for the exact supplied digest, invokes the application-owned transport, validates its complete response, and returns the authenticated CMS TimeStampToken

Options.Transport and explicit trusted TSA CA roots are required; the callback receives DER request bytes and returns DER response bytes while controlling its own HTTP authentication, TLS policy, deadlines, and network cancellation

The original imprint, selected digest, fresh nonce, TSA CMS signature, certificate binding, chain, EKU, configured revocation evidence, response budget, and cancellation are checked before a token is returned

See Native RFC3161 timestamps for transport and trust configuration