HPDFRequestHeadlessTimestamp

function HPDFRequestHeadlessTimestamp(const SignatureValue: SysUtils.TBytes;
  const Options: THPDFHeadlessTimestampOptions): SysUtils.TBytes;

Builds a fresh nonce-bearing request, calls the configured transport synchronously, authenticates its complete DER response, and returns only a verified RFC3161 CMS token

Transport and explicit trusted CA roots are required; budgets, cancellation, revocation policy, and response authentication apply before a token can be embedded

See Native RFC3161 timestamps for CMS and incremental PDF signing