HPDFVerifyHeadlessTimestampTokenForImprint

procedure HPDFVerifyHeadlessTimestampTokenForImprint(const MessageImprint, TokenDER: SysUtils.TBytes;
  Digest: THPDFHeadlessTimestampDigest; const Options: THPDFHeadlessTimestampOptions);

Authenticates an existing DER TimeStampToken against the exact supplied SHA256, SHA384, or SHA512 digest bytes and explicit TSA trust configuration

Offline verification checks the token CMS signature, certificate binding, TSA chain, critical EKU, actual imprint digest selection, and configured certificate revocation evidence

The original request nonce is unavailable in this API; use HPDFVerifyHeadlessTimestampResponseForImprint when authenticating a fresh response against its request

See Native RFC3161 timestamps for transport and trust configuration