Items to note with regard to this certificate are shown on the reverse. Product Name: Xerox D136 Copier/Printer Version and Release Numbers: Controller+PS ROM Ver. 1.200.15 Type of Product: Multi-Function Device IT Security Evaluation Facility: Information Technology Security Center Evaluation Department Date of Certification: September 28, 2018 Address of Product Manufacturer: 6-1, Minatomirai, Nishi-ku, Yokohama, Kanagawa, Japan Address of Evaluation Sponsor : 800 Phillips Road, Building 111, Webster, NY 14580, USA Fuji Xerox Co., Ltd. Evaluation Sponsor : Xerox Corporation Certification Identification: JISEC- C0619 Tatsuo Tomita / Chairman Information-technology Promotion Agency, Japan 2-28-8 Honkomagome, Bunkyo-ku, Tokyo Date: October 4, 2018 Certificate is awarded to Protection Profile Conformance: U.S. Government Approved Protection Profile - U.S. Government Protection Profile for Hardcopy Devices Version 1.0 (IEEE Std. 2600.2 TM -2009) Conformance of Functionality: Protection Profile Conformance, CC Part 2 extended Assurance Package: EAL2 Augmented by ALC_FLR.2 Certification Report Identifier: JISEC-CC-CRP-C0619-01-2018 Original Signed [Items to note] Maintenance records with regard to this certificate (none/maintenance records) The IT Product identified in this certificate has been evaluated at an accredited and approved Evaluation Facility using the Common Methodology for IT Security Evaluation, Version 3.1 Release 4, for conformance to the Common Criteria for IT Security Evaluation, Version 3.1 Release 4. This certificate applies only to the specific version and release of the product in its evaluated configuration and in conjunction with the complete Certification Report. The Evaluation has been conducted in accordance with the provisions of the Japan IT Security Evaluation and Certification Scheme and the conclusions of the Evaluation Facility in the Evaluation Technical Report are consistent with the evidence adduced. This certificate is not an endorsement of the IT Product by the Information-technology Promotion Agency or by any other organisation that recognises or gives effect to this certificate, and no warranty of the IT Product by the Information-technology Promotion Agency or by any other organisation that recognises or gives effect to this certificate, is either expressed or implied.