My final goal is to sign a pdf with a OpenSSL::PKCS7 signature + TSA signature.
According to RFC 3161 the TSA signature has to be part of PKCS7 signature as unsigned