@TÜV, TUEV and TUV are registered trademarks. Any use or application requires prior approval. Certificate Standard Common Criteria for Information Technology Security Evaluation (CC), Version 3.1 Revision 5 (ISO/IEC 15408) Certificate number CC-18-200833 TUV Rheinland Nederland B.V. certifies: Certificate holder Idemia and developer Défense Ouest - 420 rue d’Estienne d’Orves, 92700 Colombes, France Product and ID-ONE Cosmo V9 Essential version 3 (Cosmo V9) assurance level Assurance Package: = _EAL5 augmented with AVA_VAN.5 and ALC_DVS.2 Protection Profile Conformance: = Java Card Protection Profile - Open Configuration, Version 3.0, May 2012 Published by Oracle, Inc. registered under the reference ANSSI-PP-2010/03-M01 Project number 200833 Évaluation facility Brightsight BV located in Delft, PT Applying the Common Methodology for | CGH Evaluation (CEM), Version 3.1 Revision ( + " the Netherlands Information Technology Security 5 (ISO/IEC 18045) EEE The IT product identified in this certificate has been evaluated at an accredited and licensed/approved ® __ evaluation facility using the Common Methodology for IT Security Evaluation version 3.1 Revision 5 for conformance to the Common Criteria for IT Security Evaluation version 3.1 Revision 5. This certificate Common Criteria Recognition applies only to the specific version and release of the product in its evaluated configuration and in ‘Arrangement for components conjunction with the complete certification report. The evaluation has been conducted in accordance with up1o FALZ the provisions of the Netherlands scheme for certification in the area of IT security [NSCIB] and the conclusions of the evaluation facility in the evaluation technical report are consistent with the evidence Fa adduced. This certificate is not an endorsement of the IT product by TÜV Rheinland Nederland B.V. or by TÜV Rheinland Nederland B V. or by any other organisati certificate, is either expressed or implied Foaman SOGIS Mutual Recognition ‘Agreement for components up to EAL7 Validity Date of 1% issue : 14-12-2018 Certificate expiry : 14-12-2023 a PRODUCTS RvA COTE Accredited by the Dutch Council for Accreditation www.tuv.com/nl other organisation that recognises or gives effect to this certificate, and no warranty of the IT product by ion that recognises or gives effect to this estervoortsedijk 73, 6827 AV Amhem P.O. Box 2220, NL-6802 CE Arnhem The Netherlands TUVRheinland® Precisely Right.