AS2 Verified program

AS2 Verified Badge

A trust signal for AS2-compliant B2B connections. The AS2 Verified Badge is issued by AS2 Certify when a partner endpoint passes an independent end-to-end AS2 test covering TLS, certificates, encryption, signing, and the MDN receipt.

Test your AS2 connectionRead the testing methodology

What the AS2 Verified Badge means

A connection displaying the badge has earned a passing grade (A or B) on a real AS2 round trip. In the 2026 AS2 compliance landscape, where onboarding delays and silent MDN failures still consume engineer-days, the badge signals that five things work:

  • TLS connection

    The endpoint accepts a TCP connection and negotiates a modern TLS handshake (TLS 1.2 or 1.3) with an acceptable cipher suite.

  • Certificate validation

    The partner certificate is valid, not expiring within 30 days, uses adequate key strength, and has a trusted chain.

  • Encryption

    The negotiated cipher supports strong payload encryption (AES-256 or 3DES), the algorithms AS2 trading partners require.

  • Signing

    The signed MDN carries a valid S/MIME (PKCS#7) signature with a SHA-256 or stronger digest. Unsigned MDNs and weak hashes like SHA-1 or MD5 do not qualify.

  • MDN receipt

    The endpoint returns a signed Message Disposition Notification confirming the real test message was received and processed.

These five checks are part of the full 8-step AS2 testing methodology, which also covers payload integrity and latency. Learn how AS2 certificates fit into this validation.

How partners earn the badge

Three steps. No accreditation fee, no paperwork; the badge is a direct output of the graded report.

  1. Run an AS2 test on as2certify.org

    Test against your live partner endpoint, or against the hosted AS2 Certify sandbox first to fix issues before your partner is ready.

  2. Achieve a passing grade

    A grade of A or B earns the badge. A means production ready with no failed steps; B allows minor warnings, like a certificate nearing expiry.

  3. Copy the embed snippet

    The badge and a copy-paste embed snippet unlock in the graded report. Drop the snippet onto your site or partner onboarding page.

Embed the badge on your site

The badge is a linkable asset. Partners who display it link back to the AS2 Verified program, which lets your trading partners verify the claim themselves. Copy the snippet from your graded report and paste it into your site or onboarding page:

<a
  href="https://as2certify.org/verified"
  rel="noopener"
  title="AS2 Verified — tested by AS2 Certify">
  <img
    src="https://as2certify.org/badge/verified.svg"
    alt="AS2 Verified Badge"
    width="160"
    height="48" />
</a>

The alt text makes the badge accessible and indexable; the anchor points to as2certify.org/verified so the signal is verifiable.

What a passing report looks like

An illustrative example, not a real customer's data. It shows the checks behind a badge-worthy grade.

GRADE A

Sample report · score 98/100

  • TLS connection

    TLS 1.3 negotiated with AES-256-GCM.

  • Certificate validation

    Valid chain, RSA 2048-bit, expires in 9 months.

  • Encryption

    Cipher suite supports AES-256.

  • Signing

    Signed MDN verified: PKCS#7 signature, SHA-256 digest.

  • MDN receipt

    Signed MDN received and processed.

See the full methodology and grading scale.

Frequently asked questions

What is an AS2 badge?

An AS2 badge is a trust mark that shows a B2B AS2 connection passed an independent end-to-end test. The AS2 Verified Badge from AS2 Certify is issued when a connection earns a passing grade (A or B) across TLS, certificate validity, encryption, message signing, and the MDN receipt. Partners display it on their site so trading partners can see the connection was validated without a manual conformance call.

How do I get an AS2 Verified badge?

Run an AS2 test on as2certify.org against your endpoint (or the hosted sandbox first), and achieve a grade of A or B. The badge and a copy-paste embed snippet unlock in the graded report. Paste the snippet onto your website or onboarding materials to display the badge.

Is AS2 certification the same as an AS2 badge?

No. AS2 certification usually refers to a paid conformance program run by an accreditation body like Drummond Group, which tests an AS2 software implementation against the RFC once. The AS2 Verified Badge is a continuous validation signal: it confirms that a specific, live partner connection passes a real round-trip AS2 test today. The two complement each other rather than replace each other.

How much does the AS2 Verified Badge cost?

The test that earns the badge is available on every plan, including Free. Run the full 8-step diagnostic against your endpoint at no cost; a passing grade unlocks the badge. Paid plans add scheduled monitoring, historical reports, and shareable compliance evidence.

Does the AS2 Verified Badge expire?

A badge reflects the result of a specific test run. Certificates expire, configurations drift, and partner endpoints change, so a badge from months ago may not describe the connection today. Rerun the test to refresh the result; paid plans retest on a schedule so the signal stays current.

Earn your AS2 Verified Badge

Run the free public check with no signup, or create a free account to run the full 8-step diagnostic and unlock the badge.

Run the free public checkStart the full test free