What does this PDF carry?
Choose a signed PDF. We read its signatures and document timestamps and show what each one covers and whether the file changed after it.
What this checks, and what it does not
What this checksIntegrity and structure: that each signature still covers unchanged bytes (the digest), that its cryptographic signature matches the certificate carried in the file, who that certificate names, when, which timestamps it carries, and the PAdES level by structure. It reads the validation material other products add after signing, including compressed object streams; when a part of the file cannot be read, the answer is not determined, never a guess.
What this does not checkWhether the certificates are trustworthy by an official list, and revocation. A chain is only compared with the anchors this installation loaded with its providers («Trusted by this installation»), never with a trusted list, and there is no revocation check — a signature that matches an untrusted or made-up certificate still shows as verified. For qualified trust, use a validator that knows the trusted lists.