Certificate Standard Common Criteria for Information Technology Security Evaluation (CC), Version 3.1 Revision 5 Parts 1,2 &3 (ISO/IEC 15408-1, ISO/IEC 15408-2 & ISO/IEC 15408-3) Certificate number CC-22-0138361 Version 2021-01 TÜV Rheinland Nederland B.V. certifies: Cerificate holder NXP Semiconductors Germany GmbH and developer Business Unit Security & Connectivity, Troplowitzstrasse 20, 22529 Hamburg, Germany Product and MFOAES(H)x0, NT2H2xy1G and NT2H2xy1S, Release BO assurance level Assurance Package: = EAL3 augmented with ASE_TSS.2 Project number 0138361 Evaluation facility SGS Brightsight BV located in Delft, the Netherlands AIT Applying the Common Methodology for Information Technology Security Evaluation (CEM), Version 3.1 Revision 5 (ISO/IEC 18045) The IT product identified in this certificate has been evaluated at an accredited and licensed/approved evaluation facility using the Common Methodology for IT Security Evaluation version 3.1 Revision 5 for conformance to the Common Criteria for IT Security Evaluation version 3.1 Revision 5. This certificate ® applies only to the specific version and release of the product in its evaluated configuration and in conjunction with the complete certification report. The evaluation has been conducted in accordance with Common Criteria Recognition the provisions of the Netherlands scheme for certification in the area of IT security [NSCIB] and the ‘Arrangement for components conclusions of the evaluation facility in the evaluation technical report are consistent with the evidence p de adduced. This certificate is not an endorsement of the IT product by TÜV Rheinland Nederland B.V. or by other organisation that recognises or gives effect to this certificate, and no warranty of the IT product by ‘TUV Rheinland Nederiand B.V. or by any other organisation that recognises or gives effect to this certificate, is elther expressed or implied. SOGIS Mutual Recognition ‘Agreement for components up to EAL4 and ALC_FLR3 Validity Date of 1% issue : 01-02-2022 Certificate expiry : 01-02-2027 A an rot 1 application 5 PDC R.L. Kruit, LFM Systems # VI TÜV Rheinland Nederland B.V. & bp En Westervoortsediik 73, 6827 AV Amhem P.O. Box 2220, NL-6802 CE Arnhem The Netherlands © TOV, TUEV and TUV are registered trademarks. Any use or application requires prior approval. www.tuv.com A TUVRheinland® Precisely Right. a Ê 3 FR = &