Vv TRUST AND VERIFY ## Certificate ID: EUCC-3110-2026-2500178-01 #### TrustCB B.V certifies that ICT Product ID-A v1.1 on ID-One Cosmo X, version 1.1.1 Certificate holder and developer Website link IN Smart Identity France 2 place Samuel de Champlain, 92400 COURBEVOIE, France Certificate contact: Fabrice.libotte@ingroupe.com [https://ingroupe.com/psirt , https://ingroupe.com/product/id-a](https://ingroupe.com/product/id-a) #### Complies to the requirements described in the Standard: ISO/IEC 15408-1:2022, -2:2022, -3:2022, -4:2022, -5:2022, Common Criteria for Information Technology Security Evaluation, CC:2022 R1 and ISO/IEC 18045:2022, Common Methodology for Information Technology Security Evaluation, CEM:2022 R1 EUCC-3110-2026-2500178-01 Certification Report, version 1.0 Smart Card and similar devices EUCC Level : High ### CC Package conformance : - EAL5 augmented with ALC_DVS.2, ALC_FLR.3 and AVA_VAN.5 - Composite evaluation package (COMP) ### Protection Profile Conformance : - EN 419211-2:2013, Protection profiles for secure signature creation device - Part 2: Device with key Generation, V2.0.1, registered under the reference BSI-CC-PP-0059-2009-MA-02 - EN 419211-3:2013, Protection profiles for secure signature creation device - Part3: Device with key import, V1.0.2, registered under the reference BSI-CC-PP-0075-2012-MA-01 - EN 419211-4:2013, Protection profiles for secure signature creation device - Part 4: Extension for device with key generation and trusted channel to certificate generation application, V1.0.1, registered under the reference BSI-CC-PP-0071-2012-MA-01, - EN 419211-5:2013, Protection profiles for secure signature creation device - Part 5: Extension for device with key generation and trusted channel to signature creation application, V1.0.1, registered under reference BSI-CC-PP-0072-2012-MA-01 - EN 419211-6:2014, Protection profiles for secure signature creation device - Part6: Extension for device with key import and trusted channel to signature-creation application, V1.0.4, registered under the reference BSI-CC-PP-0076-2013-MA-01 As evaluated by: Under scheme: Authorised by: SGS Brightsight located in Delft, the Netherlands European Cybersecurity Certification Scheme (EUCC), (EU) 2024/482 of 31-012024, amended by (EU) 2024/3144 of 18-12-2024 and (EU) 2025/2462 of 08-12-2025 The Dutch Authority for Digital Infrastructure (RDI) This certificate is valid for five years from the latest stated issue date until, and including, the stated certificate expiry date unless otherwise suspended or withdrawn. Date of 1 st issue : 26-07-2026 Certificate expiry: 26-07-2031 Wouter Slegers, CEO The IT product identified in this certificate has been evaluated at an accredited and licensed / approved evaluation facility using the Common Methodology for IT Security Evaluation (CEM:2022) for conformance to the Common Criteria for IT Security Evaluation (CC:2022). CC:2022 and CEM:2022 are also published as ISO/IEC 15408-1, 2, 3, 4, 5:2022 and ISO/IEC 18045:2022. This certificate applies only to the specific version and release of the product in its evaluated configuration and in conjunction with the complete certification report. The evaluation has been conducted in accordance with the provisions of (EU) 2024/482, the European Cybersecurity Certification Scheme (EUCC), and the conclusions of the evaluation facility in the evaluation technical report are consistent with the evidence adduced. This certificate is not an endorsement of the IT product by TrustCB B.V. or by any other organisation that recognises or gives effect to this certificate, and no warranty of the IT Product by TrustCB B.V. or by any other organisation that recognises or gives effect to this certificate, is either expressed or implied. of #### Summarised as: Certification Report TOE type Assurance Common Criteria Recognition Arrangement for components up to EAL2 and ALC_FLR.3 TrustCB B.V. | www.trustcb.com | eucc@trustcb.com | Van den Berghlaan 48, 2132 AT Hoofddorp | The Netherlands