Schéma français d’évaluation et de certification de la sécurité des technologies de l’information CERTIFICATE ANSSI-CC-2023/59 This certificate is associated with certification report ANSSI-CC-2023/59 Strong Customer Authentication for Apple Pay on iPhone 14 Pro with A16 Bionic running iOS 16.4.1 Version iOS 16.4.1 (build 20E252) Developer: APPLE INC. Sponsor: APPLE INC. Evaluation facility: THALES/CNES Common Criteria version 3.1, révision 5 EAL2 Augmented (ADV_FSP.3) Validity date: date of signature + 5 years. Paris, the In the context of the CCRA, this certificate is recognized at level EAL2. This certificate is issued in accordance with Decree 2002-535 dated April 18, 2002 as modified relative to the evaluation and certification of the security offered by information technology products and systems. Secrétariat général de la défense et de la sécurité nationale, Agence nationale de la sécurité des systèmes d'information 51, boulevard de La Tour-Maubourg, 75700 PARIS 07 SP COURTESY TRANSLATION The product subject to this certification has been evaluated by THALES/CNES, located in France, by applying the Common Methodology for Information Technology Security Evaluation, version 3.1, révision 5, according to the Common Criteria, version 3.1, révision 5. This certificate applies only to this specific product version in its evaluated configuration. It cannot be separated from its full certification report. The evaluation was carried out in accordance with the provisions of the SOG-IS, the CCRA and the French system. The evaluation facility’s findings, formulated in the evaluation technical report, are consistent with the provided evidence. This certificate does not in itself constitute a recommendation of the product by the Agence nationale de la sécurité des systèmes d’information and does not guarantee that the certified product is completely free of exploitable vulnerabilities.