PdfSignatureValidation

Whether a signature matches the signed bytes and the signer's certificate.

True when the file did not change after signing, or every change is permitted.

The certificate chain of the signer, signer first. Each certificate is signed by the next one. The chain ends at a self-signed certificate, or where no issuer is found in the signature, the document or the trust anchors.

The changes that later revisions made after signing, each with whether the certification level and the field locks allow it. Empty when the file did not change after signing. Null when KitePDF cannot read the signed revision to compare it.

Why status is not Status.Valid, in words, or null when it is.

True when the file holds bytes that the signature does not cover, apart from the signature itself. Usually a revision was appended after signing. Such a revision can be a permitted change, such as a filled form field or a second signature.

True when status is Status.Valid and a certificate of chain is one of the trust anchors.

True when status is Status.Valid.

The time inside the signed data, or null when it holds none. For a signature it is the signing-time attribute, which the signer states. For a document timestamp it is the time the timestamp authority states.

The signer's certificate, or null when the signature holds none for its signer.

Whether the signature matches the signed bytes and the signer's certificate.