Do I understand you correctly, that you only received G3 certificates but never G2 certificates? That is weird but okay.

• At one point in time you always only use 1 key (key store)
• At one point in time you can trust 1 or more PKIs (trust store)

So if you only have one G3 certificate that explains why you can't do the eDelivery test suite, because (to the best of my knowledge) it only works with a G2 certificate. Only the "Certificate Migration" test suite and the "SMP Test Suite" can currently deal with G3 certificates

I hope this message finds you well. We've been working on completing the PKI Migration G3 certification tests and have made good progress on the receiving tests:

Completed Tests (All Passed):

✅ G2 - Valid certificate message reception

✅ G2 - Invalid certificate message reception

✅ G3 - Valid certificate message reception

✅ G3 - Invalid certificate message reception

Pending Tests (Blocked):

❌ G3 message submission with G2 SignalMessage reception

⏸️ G3 message submission with G3 SignalMessage reception

Our Configuration:

Participant ID: 9959:872236341

Seat ID: POP000991

Implementation: Phase4 4.2.2

The Issue:

For the sending tests, we understand we need to:

Perform an SMP lookup for the receiver 9922:OPTBCNTRLP5001

Retrieve the receiver's G2 certificate from the SMP

Send the document signed with our G3 certificate and encrypted with the receiver's G2 certificate

However, we're unable to locate the receiver in the SMK. We've tried DNS lookups using the acc.edelivery.tech.ec.europa.eu SMK zone with various participant ID schemes, but the DNS records return "name does not exist."

Additionally, the endpoint URL https://ap.acc.edelivery.tech.ec.europa.eu/as4 mentioned in some documentation does not resolve.

Could you please clarify:

Which SMK/SML zone should we use for the PKI Migration sending tests?

Is the receiver 9922:OPTBCNTRLP5001 registered in a specific SMP that we should query directly?

If SMP lookup is not expected for this test, where can we obtain the Testbed receiver's G2 certificate for encryption?

The downloaded ZIP package only contains the XML document to be sent, but no certificate file.

Thank you for your assistance and please advise next steps.

Best regards,
Syed

We will continue the discussion via the OpenPeppol ServiceDesk ticket and provide the clarification here afterwards, okay?

If you are interesting in a Peppol training session or in a 1:1 just send me an email - I think a lot of your questions can be resolved quickly

@razaphd Thanks, got your email. I suggest to delete the PDFs from here - they contain data only meant for your eyes

Thank you for your note and the suggestion. The PDFs have been removed from the conversation here as you advised.

Best regards,
Syed