EMV Tag Reference
Tools/EMV Tag Reference/90
Card (ICC)Format: bLength: var
90

Issuer Public Key Certificate

Tag ID
90
Format
b
Length (bytes)
var
Source
Card (ICC)

What it is

The Issuer Public Key Certificate carries the issuer public key signed by the scheme CA. The terminal recovers it with the CA key (selected by tag 8F) and then uses the issuer key to verify the card certificate or signed data during SDAStatic Data AuthenticationOffline check where the terminal verifies a fixed issuer signature over static card data. It cannot prove the card is live, so it is vulnerable to cloning and replay.View in glossary →/DDADynamic Data AuthenticationOffline check where the card signs unique, per-transaction data with its own private key — proving the chip is genuine and not a clone.View in glossary →/CDACombined DDA / Application Cryptogram generationThe strongest offline authentication: the card signs the dynamic data and the transaction cryptogram together in one step, preventing tamper (“wedge”) attacks.View in glossary →.

Where it appears

Read from the card record files; processed during offline data authentication.

Specification reference

Defined in: EMV 4.x Book 3 (Application Specification), Annex A — Data Element Dictionary

Decode & build this tag

🧱ASN.1 / DER Decoder🔓EMV TLV Decoder

Related tags

8FCA Public Key Index93Signed Static Application Data82Application Interchange Profile (AIP)
← Previous8F CA Public Key IndexNext →91 Issuer Authentication Data