...
- Self signed certificates are not allowed (as mentioned in the PEPPOL AS2 specs)
- The SSL certificate has to be recognised by both Java and Microsoft since at least 6 months.
- Grade "A" TLS configuration according to SSL Labs (https://www.ssllabs.com/ssltest)
- Access points are not allowed to tamper with provided trust lists.
- Access points A PEPPOLÂ Access Point not graded "A" is seen as considered to be unavailable with regards to the Transport Infrastructure Agreement.
...