My question is that is it possible to sign documents without the need to open that document?
1
If it is possible, it's bad. Only user (account) paired with CA can do changes and changes are saved trhrough application (in hash code). Unfortunatelly, some atributes could be changed, I just try to solve problem with "modify by" changes in document versions after moving them through powershell here.