MRA recognition for components CCRArecognition for components up to EAL 4 and ALC_FLRonly up to EAL 2 and ALC_FLRonly centro criptolégico nacional CERTIFICATE CCN-CC-43/2025 Strong Customer Authentication for Apple Pay on MacBookAir 2024 with M3 running macOS Sequoia 15.4 Type of product Otras herramientas Conformanceof functionality Product specific Security Target — CC Part 2 conformant Evaluation Facility Applus Laboratories Certification Report CCN-CC/2025-11/INF-4664 Expiration Date See Certification Report Pursuantto the authority vested in me under Act 11/2002 regulating the NationalIntelligence Centre, and under Article 1 and Article 2.2.c of Royal Decree 421/2004 of March 12th regulating the National Cryptologic Centre, | hereby: Certify that the security of Strong Customer Authentication for Apple Pay on MacBookAir 2024 with M3 running macOS Sequoia 15.4, requested by Apple Inc., 1 Apple Park Way, Cupertino CA 95014. Estados Unidos de América, has been evaluated using CC/CEM:2022 Release 1, and it has met the requirements of its Security Target identified as “Strong Customer Authentication for Apple Pay on MacBook Air 2024 with M3 running ma-cOS | Sequoia 15.4, Security Target v1.4”, for evaluation assurance level EAL2+ (ADV_FSP.3,ALC_FLR.3). Madrid, 05 December 2025 Secretary of State Director Esperanza Casteleiro Llamazares This certificate, its scope and validity are subject to the terms, conditions and requirements specified in the “Reglamento de Evaluación y Certificación de la Seguridad de las T.I.C.” at PRE/2740/2007, September19th. The above-mentioned Security Target and Certification Report are available at the National Cryptologic Centre.