Content of an EUCC Certificate
ANNEX VIISupplementary provisions
ANNEX VII Content of an EUCC Certificate An EUCC certificate shall at least contain: (a) a unique identifier established by the certification body issuing the certificate; (b) information related to the certified ICT product or protection profile and the holder of the certificate, including: (1) name of the ICT product or protection profile and, where applicable, of the target of evaluation; (2) type of ICT product or protection profile and, where applicable, of the target of evaluation; (3) version of the ICT product or protection profile; (4) name, address and contact information of the holder of the certificate; (5) link to the website of the holder of the certificate containing the supplementary cybersecurity information referred to in Article 55 of Regulation (EU) 2019/881; (c) information related to the evaluation and certification of the ICT product or protection profile, including: (1) name, address and contact information of the certification body that issued the certificate; (2) where different from the certification body, name of the ITSEF which performed the evaluation; (3) name of the responsible national cybersecurity certification authority; (4) a reference to this Regulation; (5) a reference to the certification report associated with the certificate referred to in Annex V; (6) the applicable assurance level in accordance with Article 4; (7) a reference to the version of the standards used for the evaluation, referred to in Article 3; (8) identification of the assurance level or package specified in the standards referred to in Article 3 and in conformity with Annex VIII, including the assurance components used and the AVA_VAN level covered; (9) where applicable, reference to one or more protection profiles with which the ICT product or protection profile complies; (10) date of issuance; (11) period of validity of the certificate; (d) the mark and label associated with the certificate in accordance with Article 11.