EMV Certificate Inspector

CA Public Key

Modulus (hex)

[ 0 B ]

Exponent (hex)

Issuer Certificate (Tag 90)

Signed Issuer Public Key Certificate – Tag 90 (hex)

[ 0 B ]

PK Remainder – Tag 92 (hex, optional)

PK Exponent – Tag 9F32 (hex)

ICC Certificate (Tag 9F46) — optional for SDA

Signed ICC Public Key Certificate – Tag 9F46 (hex)

[ 0 B ]

PK Remainder – Tag 9F48 (hex, optional)

PK Exponent – Tag 9F47 (hex)

Static Data for Auth (AFL offline-auth records)

Required for the ICC cert internal hash check (EMV Book 2 §6.4 Step 9) and for SDA verification. Concatenate all records the AFL marks for offline authentication, without the outer Tag 70 wrapper. If the AFL offline-auth count is 0 for every SFI, leave blank.

Offline-auth records (hex, no Tag 70 wrapper)

[ 0 B ]

SDA Tag List appendage – Tag 9F4A values (hex, optional)

SDA (Static Data Authentication): verify the Signed Static Application Data (Tag 93) using the recovered issuer public key. Recover keys in the Certificate Chain & Keys tab first.

Signed Static Application Data – Tag 93 (hex)

[ 0 B ]

Static Data for Auth (hex) — shared with Certificate Chain & Keys tab

[ 0 B ]

Data Authentication Code – Tag 9F45 (hex, optional)

DDA / fDDA (Dynamic Data Authentication): verify the SDAD returned by INTERNAL AUTHENTICATE (Tag 9F4B) using the recovered ICC public key. Recover keys in the Certificate Chain & Keys tab first.

Signed Dynamic Application Data – Tag 9F4B from INTERNAL AUTHENTICATE (hex)

[ 0 B ]

DDOL Response Data (hex)

[ 0 B ]

CDA (Combined DDA/AC): verify the SDAD returned by GENERATE AC (Tag 9F4B). The SDAD embeds the Application Cryptogram, binding auth to the transaction. Recover keys in the Certificate Chain & Keys tab first.

Signed Dynamic Application Data – Tag 9F4B from GENERATE AC (hex)

[ 0 B ]

CDOL1 Response Data (hex)

[ 0 B ]

Application Cryptogram – Tag 9F26 (hex)

Unpredictable Number – Tag 9F37 (hex)

SDA Tag List Appendage – Tag 9F4A values (hex, optional)

CDOL1 DOL – Tag 8C (hex, optional — M/Chip CVN10)

Paste a raw TLV blob (e.g. full GENERATE AC response or card data) and click Extract & Populate to auto-fill the fields in other tabs. Tags extracted: 90, 92, 9F32, 9F46, 9F47, 9F48, 93, 9F45, 9F4B, 9F26, 9F37, 9F4A, 8C.

Raw TLV (hex)

[ 0 B ]