Version 2020-3 © TOV, TUEV and TUV are registered trademarks. Any use or application requires prior approval. Certificate Standard Certificate number Certificate holder and developer Product and assurance level Project number Evaluation facility ‘Common Criteria Recognition Arrangement for components. up to EAL2 TEN Selen, E ma SOGIS Mutual Recognition Agreement for components up toEAL7 Validity IN WIN PRODUCTS RvA C078 Accredited by the Dutch Council for Accreditation www.tuv.com/nl Common Criteria for Information Technology Security Evaluation (CC), Version 3.1 Revision 5 (ISO/IEC 15408-1, -2 and -3) CC-20-0122197 TUV Rheinland Nederland B.V. certifies: ST Microelectronics S.r.| Z.l. Marcianise SUD 81025 Marcianise, Italy JSIGN3 V1.1.4 Assurance Package: = EAL4 augmented with AVA_VAN.S Protection Profile Conformance = EN 419211-2:2013 = EN 419211-4:2013 = EN 419211-5:2013 0122197 Brightsight BV located in Delft, the Netherlands Applying the Common Methodology for Information Technology Security Evaluation (CEM), Version 3.1 Revision 5 (ISO/IEC 18045) The Designated Certification Body from The Netherlands under Article 30(2) and 39(2) of Regulation 91012014 declares that: ‘© the IT product identified in this certificate is a Qualified Signature Creation Device (QSCD) where the electronic signature creation data is held in an entirely but not necessarily exclusively user-managed environment. + The IT product meets the requirements laid down in Annex Il of REGULATION (EU) No 910/2014 OF ‘THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 23 July 2014 (REGULATION). ‘* Conformity of the IT product with the requirements of Annex II of REGULATION has been certified with an evaluation process that fulfils the requirements of Article 30(3.(a)) of REGULATION and the standards listed in the Annex of COMMISSION IMPLEMENTING DECISION (EU) 2016/650 of 25 April 2016." The IT product identified in this certificate has been evaluated at an accredited and licensed/approved evaluation facility using the Common Methodology for IT Security Evaluation version 3.1 Revision 5 for conformance to the Common Criteria for IT Security Evaluation version 3.1 Revision 5. This certificate applies only to the specific version and release of the product in its evaluated configuration and in conjunction with the complete certification report. The evaluation has been conducted in accordance with the provisions of the Netherlands scheme for certification in the area of IT security [NSCIB] and the conclusions of the evaluation facility in the evaluation technical report are consistent with the evidence adduced. This certificate is not an endorsement of the IT product by TÜV Rheinland Nederland B.V. or by other organisation that recognises or gives effect to this certificate, and no warranty of the IT product by TUV Rheinland Nederland B.V. or by any other organisation that recognises or gives effect to this certificate, is either expressed or implied. Date of 1* issue : 29-06-2020 Certificate expiry: 29-06-2025 R.L. Kruit, LFM Systems TÜV Rheinland Nederland B.V. Westervoortsedijk 73, 6827 AV Arnhem P.O. Box 2220, NL-6802 CE Arnhem The Netherlands TUVRheinland® Precisely Right.