...
Provide list of all non-web ports served off the domain name
Ensure minimum encryption protocol of TLS 1.2
Ensure all application transactions complete within 300 seconds (application timeout)
Ensure application has a valid certificate and includes any vanity domain names as the Common Name or SAN
Ensure client supports Server Name Indication (SNI)
Contact information for the group responsible for maintaining this application
CUIT Implementation - API Requirements for Allowlisting Legitimate Automated Traffic
...