ENAC CERTIFICACIÓN 1SO 17065 N°45/C-PRIIO CCRArecognition for components up to EAL 2 and ALC_FLR only C @ centro criptolégico nacional CERTIFICATE CCN-CC-28/2023 SOMA-c007 Machine Readable Electronic Document SSCD Application Version 4 Type of product QSCD/SSCD,Smartcards and similar devices Conformanceof functionality PP Conformancefunctionality Protection Profile Conformance BSI-CC-PP-0059-2009-MA-01, BSI-CC-PP-0071-2012 and BSI-CC- PP-0072-2012. Evaluation Facility Applus Laboratories Certification Report CCN-CC/2018-20/INF-4155 Expiration Date See Certification Report Pursuantto the authority vested in me under Act 11/2002 regulating the NationalIntelligence Centre, and underArticle 1 and Article 2.2.c of Royal Decree 421/2004 of March 12th regulating the National Cryptologic Centre, | hereby: Certify that the security of SOMA-c007 Machine Readable Electronic Document SSCD Application Version 4, requested by HID Global, Viale Remo De Feo, 1, 80022 Arzano (NA),Italy, has been evaluated using Common Methodology for Information Technology Security Evaluation/Common Criteria for Information Technology Security Evaluation version 3.1 release 5, and it has met the requirements ofits Security Target identified as “TCAE180037 - SOMA-c007 Machine Readable Electronic Document - Security Target SSCD Application - Recertification, version 1.4, 18.10.2022”, for evaluation assurance level EAL5 + ALC_DVS.2 + AVA_VAN.5. Madrid, 26 July 2023 Secretary of State Director Esperanza Casteleiro Llamazares This certificate, its scope and validity are subject to the terms, conditions and requirements specified in the “Reglamento de Evaluación y Certificación de la Seguridad delas T.1.C.” at PRE/2740/2007, September19th. The above-mentioned Security Target and Certification Report are available atthe National Cryptologic Centre. This certificate will come into effect the following day that the associated certificate resolution signed by the Secretary of State Director of CCNis published in the Official State Gazette (B.O.E — https://www.boe.es). The IT product identified in this certificate has been evaluated at an accredited and licensed/approved evaluation facility using the Common Methodology for Information Technology Security Evaluation/Common Criteria for Information Technology Security Evaluation version 3.1 release 5 and CC Supporting Documentsaslisted in the Certification Report. This certificate applies only to the specific version and release of the productin its evaluated configuration and in conjunction with the complete Certification Report. The evaluation has been conducted in accordance with the provisions of the Spanish IT Security Evaluation and Certification Scheme, PRE/2740/2007 Septemberthe 19th, and the conclusions of the evaluation facility in the evaluation technical report are consistent with the evidence adduced.This certificate is not an endorsement ofthe IT product by the Spanish Schemeor by any otherorganisation that recognisesorgives effect to this certificate, and no warranty of the IT product by the Spanish Schemeorby any other organisation that recognises orgives effect to this certificate, is either expressed or implied.