The logon only asked for the Duns Number and + 4, what prevents another person that knows your Duns Number with a certificate from accessing your information?

The negotiators list is crossed referenced with the certificate to ensure that only the people authorized to work on the offer are granted access.