Authenticator

Back to MDS Explorer

CardOS FIDO2 Token

8da0e4dc-164b-454e-972e-88f362b23d59

Key facts

CertificationsFIDO_CERTIFIED_L1, FIDO_CERTIFIED
ProtocolsFIDO_2_0, FIDO_2_1
Key protectionHardware, Secure Element
Crypto strength128 bits
Matcher protectionOn Chip
AlgorithmsSecp256r1 Ecdsa Sha256 Raw
AttestationBasic Full
User verificationNone, Presence Internal, Passcode External
CapabilitiesResident keys (passkeys) · PIN · Credential management
ConnectivityExternal, Wired, Wireless, Nfc
Limitsmax message 1024 bytes
MDS last updated2025-02-18
Protocol familyfido2
Authenticator version1
Statement schema3
Protocol versions1.0, 1.1

Certification history

StatusDateDetails
Level 1 2024-10-01 CardOS FIDO2 Token · policy 1.4.0 · req 1.5.0
Certified 2024-10-01

Attestation root certificates

The root / intermediate certificates the FIDO Metadata Service publishes for this authenticator. A key’s attestation certificate must chain to one of these to be considered genuine.

SubjectCardOS
IssuerCardOS (self-signed root)
Valid2024-06-04 → 2039-06-01
SerialA2059ED10E435B57
SHA-256D1:F4:B1:55:AB:E4:67:B7:3C:68:C0:19:83:3E:90:F6:3D:11:1A:A7:A0:2A:2C:47:3F:CA:0A:21:1F:30:82:89
TypeEnd-entity
Show PEM 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----