S01-MQ: Yes
Rationale
RFC 9001 requires server authentication, not a public CA. The selected profile uses locally generated certificates trusted directly by counterparts, including client authentication during the handshake. No external naming or certification authority is selected. This is a profile inference, not the default Web PKI deployment.
Assessment method
Documentary analysis
Source context
Primary specification / selected profile
Outstanding qualification
Shared qualification for S01/S02/S03/F18/C05: pin a multipath-21 implementation, provision mutual certificate trust and numeric private addresses, disable DNS and external certificate services, and verify authenticated operation. Check that an untrusted certificate is rejected. No execution performed.