PCI DSS
PCI DSS v4.0 requires strong cryptography for cardholder data sent over open networks (Requirement 4.2.1), and that certificates used for this are valid and not expired or revoked. It also requires documented key management (Requirements 3.6 and 3.7). The portal's inventory, expiry alerts and reports provide the evidence.