THPDFSignatureInfo Record
Describes one loaded PDF signature from certificate identities through byte-range coverage to the verification verdict
Declaration
THPDFSignatureInfo= record
FieldName: AnsiString; // signature form field partial name
SubFilter: AnsiString; // /SubFilter of the signature dictionary
SignerName: AnsiString; // CN of the signer certificate subject
SubjectDN: AnsiString; // rendered subject distinguished name
IssuerDN: AnsiString; // rendered issuer distinguished name
SerialNumberHex: AnsiString; // certificate serial number, hex encoded
ValidFrom: TDateTime; // certificate notBefore (0 when absent)
ValidTo: TDateTime; // certificate notAfter (0 when absent)
SigningTime: TDateTime; // signed attribute 1.2.840.113549.1.9.5,
// else the /M entry, else 0
HashAlgorithm: AnsiString; // SHA-1, SHA-2, SHA-3, or SHAKE256
DigestAlgorithmOID: AnsiString;
DigestConsistencyIssue: THPDFCMSDigestConsistencyIssue;
SignaturePolicy: THPDFSignaturePolicyInfo;
Reason: AnsiString; // /Reason from the signature dictionary
Location: AnsiString; // /Location
ContactInfo: AnsiString; // /ContactInfo
ByteRange: array of Int64; // /ByteRange pairs (offset, length, ...)
CoversWholeDocument: boolean; // ByteRange spans the file except /Contents
SignedRevisionLength: Int64; // source prefix covered by this signature
UnsignedTrailingBytes: Int64; // bytes appended after the signed revision
CertificateTimeValidity: THPDFSignatureTimeValidity;
Status: THPDFSignatureVerifyStatus;
PublicKeyAlgorithm: AnsiString; // RSA, ECDSA, EdDSA, or ML-DSA
SignatureAlgorithm: AnsiString; // CMS signature algorithm name
SignatureAlgorithmOID: AnsiString;
CurveName: AnsiString; // ECDSA curve, such as 'P-256'
Timestamp: THPDFTimestampInfo; // RFC 3161 signature or document timestamp
CMSAttributes: THPDFCMSAttributeSummary;
CertificateValidation: THPDFCertificateValidationInfo;
end;Unit
HPDFSignVerify
Fields
| Field | Purpose |
|---|---|
FieldName | Partial name of the signature form field |
SubFilter | Value of the /SubFilter entry in the signature dictionary |
SignerName | CN of the signer certificate subject |
SubjectDN | Rendered subject distinguished name of the certificate |
IssuerDN | Rendered issuer distinguished name of the certificate |
SerialNumberHex | Certificate serial number, hex encoded |
ValidFrom | Certificate notBefore, 0 when absent |
ValidTo | Certificate notAfter, 0 when absent |
SigningTime | Signed attribute 1.2.840.113549.1.9.5, else the /M entry, else 0 |
HashAlgorithm | Digest family name: SHA-1, SHA-2, SHA-3, or SHAKE256 |
DigestAlgorithmOID | Digest algorithm object identifier |
DigestConsistencyIssue | Mismatch detected between digest algorithms inside the CMS structure |
SignaturePolicy | Signature policy details when the signature carries a policy |
Reason | Value of the /Reason entry |
Location | Value of the /Location entry |
ContactInfo | Value of the /ContactInfo entry |
ByteRange | /ByteRange offset and length pairs describing the covered byte intervals |
CoversWholeDocument | True when the byte range spans the whole file except the /Contents gap |
SignedRevisionLength | Length of the source prefix covered by this signature |
UnsignedTrailingBytes | Bytes appended after the signed revision |
CertificateTimeValidity | Whether the signing time falls inside the certificate validity window |
Status | Verification verdict of type THPDFSignatureVerifyStatus |
PublicKeyAlgorithm | Public key family: RSA, ECDSA, EdDSA, or ML-DSA |
SignatureAlgorithm | CMS signature algorithm name |
SignatureAlgorithmOID | Signature algorithm object identifier |
CurveName | ECDSA curve name, such as P-256 |
Timestamp | RFC 3161 signature or document timestamp details |
CMSAttributes | Summary of the signed CMS attributes |
CertificateValidation | Certificate chain validation outcome |
Usage notes
GetLoadedSignatureInforeturns the descriptive fields;VerifyLoadedSignatureandVerifyLoadedSignatureExfill the status and validation fields after checking digestsCoversWholeDocumenttogether withUnsignedTrailingBytesshows whether later revisions changed the document after signing- The same record feeds certificate validation, so one call covers identities, coverage, algorithms, and chain checks