RFC 3161 timestampA timestamp authority signs a digest and time. Requires a configured, pinned TSA trust chain.