HPDFVerifyHeadlessTimestampResponse

function HPDFVerifyHeadlessTimestampResponse(const SignatureValue, RequestDER,
  ResponseDER: SysUtils.TBytes; const Options: THPDFHeadlessTimestampOptions): SysUtils.TBytes;

Returns the authenticated RFC3161 CMS token after verifying response status, request nonce, signature-value imprint, TSA chain, critical timestamp EKU, ESS binding, and optional CRL evidence

RequestDER must be the nonce-bearing request generated for SignatureValue; malformed or mismatched requests, responses, or trust evidence raise EHPDFHeadlessTimestampError

Explicit trusted CA roots are mandatory and trailing DER bytes are rejected