Version 2021-01 ® TUV, TUEV and TUV are registered trademarks. Any use or application requires prior approval. Certificate Standard Certificate number Certificate holder and developer Product and assurance level Project number Evaluation facility AT HOH ® ‘Common Criteria Recognition ‚Arrangement for components up to EALZ and ALC_FLR.3 & a : mon! SOGIS Mutual Recognition ‚Agreement for components up to EAL 7 end ALC_FLR3 Validity Council for Accreditation www.tuv.com/nl Common Criteria for Information Technology Security Evaluation (CC), Version 3.1 Revision 5 Parts 1, 2 & 3 (ISONEC 15408-1, ISO/IEC 15408-2 & ISO/IEC 15408-3) CC-21-214607 TÜV Rheinland Nederland B.V. certifies: Sony Corporation Sony City Osaki 2-10-1 Osaki, Shinagawa-ku, Tokyo, 141-8610, Japan RC-SA20, RC-SA21 and RC-SA24 Series version 1.00 Assurance Package: = EAL6 augmented with ASE_TSS.2 Protection Profile Conformance: = Public Transportation IC Card Protection Profile, Version 1.12, 1 August 2018, registered under the reference JISEC-CC-CRP- C0612-01-2018 214607_2 SGS Brightsight BV located in Delft, the Netherlands Applying the Common Methodology for Information Technology Security Evaluation (CEM), Version 3.1 Revision 5 (ISO/IEC 18045) The IT product identified in this certificate has been evaluated at an accredited and licensed/approved evaluation facility using the Common Methodology for IT Security Evaluation version 3.1 Revision 5 for conformance to the Common Criteria for IT Security Evaluation version 3.1 Revision 5. This certificate applies only to the specific version and release of the product in its evaluated configuration and in conjunetion with the complete certification report. The evaluation has been conducted in accordance with the provisions of the Netherlands scheme for certification in the area of IT security INSCIB] and the conclusions of the evaluation facility in the evaluation technical report are consistent with the evidence adduced. This certificate is not an endorsement of the IT product by TÜV Rheinland Nederland B.V. or by other organisation that recognises or gives effect to this certificate, and no warranty of the IT product by TOV Rheinland Nederland B.V. or by any other organisation that recognises or gives effect to this certificate, is elther expressed or implied. Date of 1% issue : 05-06-2020 Date of 2" issue : 26-10-2021 Certificate expiry : 26-10-2026 R.L. Kruit, LFM Systems TÜV Rheinland Nederland B.V. Westervoortsedijk 73, 6827 AV Amhem P.O. Box 2220, NL-6802 CE Arnhem The Netherlands 3 TÜVRheinland® Precisely Right.