Smart-card and payment data is full of two- and four-digit hex labels such as 5A, 9F02 or 5F20. They are BER-TLV tags: each one announces what the value after it means. This page is a reference to tags used in payment cards and terminals and in several other smart-card applications (UICC/SIM, the US PIV card, ePassports, OpenPGP cards and German eID documents). Every entry links to the publicly available documents in which we confirmed it.
What this list is and is not. It is a maintained developer reference built by Ambimat from public documentation published by payment processors, card networks, standards bodies and specification authors. It is not an official registry, and it does not cover every tag in use: payment specifications are published by EMVCo under its own terms of use and are not reproduced here, and we only list a tag when a freely readable document confirms it. For certification or production work, check each tag against the specification you implement.
Jump to a section
- Payment card and terminal data objects
- File control parameters (UICC) and UICC application and directory data
- PIV card data objects
- Electronic passport data groups
- OpenPGP card data objects
- eID and card-verifiable certificate data
Two things a tag tells you
It helps to separate what the bytes of a tag say by themselves from what an application says they mean.
1. Encoding: readable from the tag alone
Under the Basic Encoding Rules (ITU-T X.690), the first byte of every tag carries two facts you can decode without knowing the application:
| Bits of the first byte | Meaning | Example |
|---|---|---|
| Bits 8–7: class | 00 universal, 01 application, 10 context-specific, 11 private |
5A = 0101 1010: application class |
| Bit 6: form | 0 primitive (the value is data), 1 constructed (the value contains further TLV objects) |
6F = 0110 1111: constructed |
| Bits 5–1 | The tag number; if all five are 1 (1F), the number continues in the following byte(s) |
9F02: first byte 9F ends in 11111, so 02 follows |
The “Class, form” column in the tables below is computed from these bits, not copied from anywhere. Our article How to parse BER-TLV data in JavaScript explains the encoding in full and includes a tested parser.
2. Meaning: defined by the application
BER only says how a tag is built. What 5F20 means is decided by the application that uses it, and different applications reuse the same tag values:
| Tag | Payment data | PIV card | German eID / CV certificates |
|---|---|---|---|
5F20 |
Cardholder name | Subject identifier | Certificate holder reference |
42 |
Issuer identification number | Issuer identification number | Certification authority reference |
80 |
– | Cryptographic algorithm identifier | – |
The same 80 is the file size in a UICC file-control template and the header version in an ePassport. A tag value therefore only means something together with the application and, often, the template it sits in. The tables below are grouped by application, and entries that depend on a parent template name it.
Reading payment tags
Payment tags travel between the card, the terminal and the acquirer; you meet them in terminal logs and in the chip-data field of authorisation messages. A few practical points:
- The status word is not part of the data. Strip the last two bytes (
90 00) of a card response before parsing it; see our APDU reference. - Card and terminal both have an AID.
4Fis the card’s application identifier and9F06the terminal’s; look AIDs up in our AID list. - Some tags differ between networks. The sources do not agree on what
9F6E,9F53,9F7Cand9F1Care called, because their meaning depends on the card network or application. Those entries show every name the sources use. - Proprietary ranges. Processors and terminal vendors also define private tags of their own (often in the
DF… range); they are left out here because their meaning is local to one product.
The tag reference
Payment card and terminal data objects
Data elements exchanged between payment cards, terminals and acquirers, as named in publicly available processor, gateway and network documentation (for example in the chip data of an authorisation message). 75 entries.
| Tag | Name | Class, form | Sources |
|---|---|---|---|
42 |
Issuer Identification Number (IIN) | Application, primitive | Visa |
4F |
Application Identifier | Application, primitive | Cybersource, Authorize.Net, Shift4, Elavon |
50 |
Application Label | Application, primitive | Authorize.Net, Visa, Elavon, AnywhereCommerce |
56 |
Track 1 Equivalent Data | Application, primitive | Cybersource, Visa, AnywhereCommerce, Global Payments (Heartland) |
57 |
Track 2 equivalent data | Application, primitive | Cybersource, Shift4, Visa, AnywhereCommerce |
5A |
Application PAN | Application, primitive | Cybersource, Authorize.Net, Shift4, Visa |
5F20 |
Cardholder name | Application, primitive | Cybersource, Visa, AnywhereCommerce, Global Payments (Heartland) |
5F24 |
Application Expiration Date | Application, primitive | Cybersource, Shift4, Visa, Elavon |
5F28 |
Issuer Country Code | Application, primitive | Global Payments (Heartland) |
5F2A |
Transaction Currency Code | Application, primitive | Cybersource, Authorize.Net, Shift4, Visa |
5F2D |
Cardholder Language Preference | Application, primitive | Shift4, Elavon |
5F30 |
Service Code | Application, primitive | Shift4, AnywhereCommerce |
5F34 |
Application PAN Sequence Number | Application, primitive | Authorize.Net, Shift4, Visa, USPF |
5F36 |
Terminal currency exponent | Application, primitive | Elavon |
61 |
Directory Entry | Application, constructed | Visa |
71 |
Issuer Script Template 1 | Application, constructed | Visa, USPF, Elavon, Global Payments (Heartland) |
72 |
Issuer Script Template 2 | Application, constructed | Visa, USPF, Elavon, Global Payments (Heartland) |
82 |
Application Interchange Profile | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
84 |
Dedicated file name | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
87 |
Application Priority Indicator | Context-specific, primitive | Visa |
8A |
Authorization Response Code | Context-specific, primitive | Authorize.Net, Visa, Elavon, Bluefin |
8E |
CVM List | Context-specific, primitive | Elavon, AnywhereCommerce |
8F |
CA Public Key Index | Context-specific, primitive | Elavon |
91 |
Issuer Authentication Data | Context-specific, primitive | Visa, USPF, Elavon, Global Payments (Heartland) |
95 |
Terminal Verification Results | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
96 |
Kernel identifier-terminal | Context-specific, primitive | Cybersource |
99 |
Transaction PIN | Context-specific, primitive | Cybersource, Visa, AnywhereCommerce, Global Payments (Heartland) |
9A |
Transaction Date | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
9B |
Transaction Status Information | Context-specific, primitive | Authorize.Net, Shift4, Elavon, Slim CD |
9C |
Transaction Type | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
9F02 |
Amount, Authorized | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
9F03 |
Amount, Other | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
9F06 |
Application Identifier (AID) – Terminal | Context-specific, primitive | Shift4, Elavon, AnywhereCommerce, Global Payments (Heartland) |
9F07 |
Application Usage Control | Context-specific, primitive | Authorize.Net, Elavon, AnywhereCommerce, Global Payments (Heartland) |
9F08 |
ICC Application Version Number | Context-specific, primitive | Elavon, Global Payments (Heartland) |
9F09 |
Application Version Number (Terminal) | Context-specific, primitive | Authorize.Net, Elavon, AnywhereCommerce, Global Payments (Heartland) |
9F0B |
Cardholder name (extended) | Context-specific, primitive | Cybersource, Visa, Global Payments (Heartland) |
9F0D |
Issuer Action Code – Default | Context-specific, primitive | Authorize.Net, Elavon, AnywhereCommerce, Global Payments (Heartland) |
9F0E |
Issuer Action Code – Denial | Context-specific, primitive | Authorize.Net, Elavon, AnywhereCommerce, Global Payments (Heartland) |
9F0F |
Issuer Action Code – Online | Context-specific, primitive | Authorize.Net, Elavon, AnywhereCommerce, Global Payments (Heartland) |
9F10 |
Issuer Application Data | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
9F12 |
Application Preferred Name | Context-specific, primitive | Authorize.Net, Elavon, AnywhereCommerce, Global Payments (Heartland) |
9F15 |
Merchant Category Code | Context-specific, primitive | Elavon, MineSec |
9F16 |
merchant id (MerchId) | Context-specific, primitive | MineSec, AnywhereCommerce |
9F18 |
Issuer Script Identifier | Context-specific, primitive | Elavon |
9F19 |
Token Requestor Id | Context-specific, primitive | Cybersource |
9F1A |
Terminal Country Code | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
9F1B |
Terminal Floor Limit | Context-specific, primitive | Elavon, MineSec |
9F1C |
EMV Device ID / Terminal ID Meaning depends on the card network or application; the sources use different names. |
Context-specific, primitive | Elavon, AnywhereCommerce |
9F1E |
Interface Device (IFD) Serial Number | Context-specific, primitive | Authorize.Net, Shift4, Visa, Elavon |
9F1F |
Track 1 Discretionary Data | Context-specific, primitive | Cybersource, Shift4, Visa, Global Payments (Heartland) |
9F20 |
Track 2 Discretionary Data | Context-specific, primitive | Cybersource, Shift4, Visa, Global Payments (Heartland) |
9F21 |
Transaction Time | Context-specific, primitive | Authorize.Net, Shift4, AnywhereCommerce, Global Payments (Heartland) |
9F22 |
Certification Authority Public Key Index | Context-specific, primitive | Elavon |
9F24 |
Payment Account Reference (PAR) | Context-specific, primitive | USPF |
9F26 |
Application Cryptogram | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
9F27 |
Cryptogram Information Data | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Elavon |
9F33 |
Terminal Capabilities | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
9F34 |
Cardholder Verification Method (CVM) Results | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
9F35 |
Terminal Type | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Elavon |
9F36 |
Application Transaction Counter | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
9F37 |
Unpredictable Number | Context-specific, primitive | Cybersource, Authorize.Net, Shift4, Visa |
9F39 |
Pos Entry Mode | Context-specific, primitive | Authorize.Net, Shift4, Visa, Elavon |
9F40 |
Additional Terminal Capabilities | Context-specific, primitive | Shift4, Elavon, AnywhereCommerce, Global Payments (Heartland) |
9F41 |
Transaction Sequence Counter | Context-specific, primitive | Elavon, AnywhereCommerce, Global Payments (Heartland) |
9F47 |
ICC Public Key Exponent | Context-specific, primitive | Elavon |
9F49 |
Default DDOL | Context-specific, primitive | Elavon |
9F4C |
Icc Dynamic Number | Context-specific, primitive | AnywhereCommerce, Global Payments (Heartland) |
9F53 |
Discover Contactless Card Verification Results / Transaction Category Code Meaning depends on the card network or application; the sources use different names. |
Context-specific, primitive | USPF, AnywhereCommerce |
9F5B |
Issuer Script Results | Context-specific, primitive | Visa, Elavon, AnywhereCommerce, Global Payments (Heartland) |
9F60 |
Authenticated application data | Context-specific, primitive | Cybersource |
9F66 |
Terminal Transaction Qualifiers | Context-specific, primitive | Cybersource, Visa, Elavon, AnywhereCommerce |
9F69 |
Default UDOL | Context-specific, primitive | Elavon |
9F6E |
AMEX reader enhanced capability / Form Factor Indication / Third Party Data / Enhanced Contactless Reader Capabilities / Form Factor Indicator / Form Factor Indicator (FFI) / Form Factor Indicator (Ffi) / Paypass Third-Party Data / ICC Form Factor Indicator / Third Party Data Meaning depends on the card network or application; the sources use different names. |
Context-specific, primitive | Cybersource, Shift4, Visa, USPF |
9F7C |
Customer Exclusive Data / Customer Exclusive Data (Ced) / Customer Exclusive Data / Merchant Custom Data Meaning depends on the card network or application; the sources use different names. |
Context-specific, primitive | Visa, USPF, Elavon, Bluefin |
File control parameters (UICC / ETSI TS 102 221)
Tags a UICC returns in response to SELECT or STATUS to describe a file or application. 37 entries.
| Tag | Name | Class, form | Sources |
|---|---|---|---|
62 |
FCP template returned in SELECT/STATUS response |
Application, constructed | ETSI |
80 |
Access Mode – Generic Command inside security attribute template 'AB' |
Context-specific, primitive | ETSI |
80 |
File Size – Data inside FCP template '62' |
Context-specific, primitive | ETSI |
80 |
File size inside FCP template '62' (EF) |
Context-specific, primitive | ETSI |
81 |
File Size – Total inside FCP template '62' |
Context-specific, primitive | ETSI |
81 |
Total file size inside FCP template '62' |
Context-specific, primitive | ETSI |
82 |
File Descriptor inside FCP template '62' |
Context-specific, primitive | ETSI |
83 |
File Identifier inside FCP template '62' |
Context-specific, primitive | ETSI |
83 |
Key Reference inside control reference template 'A4' |
Context-specific, primitive | ETSI |
83 |
Key reference inside PIN status template 'C6' (not the FCP file identifier) |
Context-specific, primitive | ETSI |
84 |
DF name (AID) inside FCP template '62' |
Context-specific, primitive | ETSI |
85 |
Proprietary – Primitive inside FCP template '62' |
Context-specific, primitive | ETSI |
88 |
SFI Support inside FCP template '62' |
Context-specific, primitive | ETSI |
88 |
Short File Identifier (SFI) inside FCP template '62' (EF) |
Context-specific, primitive | ETSI |
8A |
Life Cycle Status inside FCP template '62' |
Context-specific, primitive | ETSI |
8A |
Life Cycle Status Integer inside FCP template '62' |
Context-specific, primitive | ETSI |
8B |
Security Attribute – Reference Format inside FCP template '62' |
Context-specific, primitive | ETSI |
8B |
Security attributes: Referenced to expanded format inside FCP template '62' |
Context-specific, primitive | ETSI |
8C |
Security Attribute – Compact Format inside FCP template '62' |
Context-specific, primitive | ETSI |
8C |
Security attributes: Compact format inside FCP template '62' |
Context-specific, primitive | ETSI |
90 |
PIN Enabled/Disabled status byte(s) inside PIN status data objects 'C6' |
Context-specific, primitive | ETSI |
90 |
PS_DO inside PIN status template 'C6' |
Context-specific, primitive | ETSI |
90 |
Security Condition – ALWAYS inside security attribute template 'AB' |
Context-specific, primitive | ETSI |
95 |
Usage Qualifier inside control reference template 'A4' and PIN status 'C6' |
Context-specific, primitive | ETSI |
95 |
Usage qualifier DO inside PIN status template 'C6' |
Context-specific, primitive | ETSI |
97 |
Security Condition – NEVER inside security attribute template 'AB' |
Context-specific, primitive | ETSI |
9C |
Proprietary State Machine inside security attribute template 'AB' |
Context-specific, primitive | ETSI |
9E |
Security Condition – Security Condition Byte inside security attribute template 'AB' |
Context-specific, primitive | ETSI |
A0 |
Security Condition – OR Template inside security attribute template 'AB' |
Context-specific, constructed | ETSI |
A4 |
Control reference Template inside security attribute template 'AB' |
Context-specific, constructed | ETSI |
A5 |
Proprietary Template inside FCP template '62' |
Context-specific, constructed | ETSI |
A5 |
Proprietary information constructed; inside FCP template '62' |
Context-specific, constructed | ETSI |
AB |
Security Attribute Template – Expanded Format inside FCP template '62' |
Context-specific, constructed | ETSI |
AB |
Security attributes: Expanded format constructed; inside FCP template '62' |
Context-specific, constructed | ETSI |
AF |
Security Condition – AND Template inside security attribute template 'AB' |
Context-specific, constructed | ETSI |
C6 |
PIN Status Template DO inside FCP template '62'; constructed |
Private, primitive | ETSI |
C6 |
PIN Status data objects inside FCP template '62' |
Private, primitive | ETSI |
UICC application and directory data (ETSI)
Tags used in EF.DIR application templates, proprietary file information and related UICC structures. 51 entries.
| Tag | Name | Class, form | Sources |
|---|---|---|---|
4F |
Application Identifier inside application template '61' |
Application, primitive | ETSI |
4F |
Application Identifier (AID) inside application template '61' |
Application, primitive | ETSI |
50 |
Application Label inside application template '61' |
Application, primitive | ETSI |
51 |
Path inside application template '61' |
Application, primitive | ETSI |
52 |
Command to Perform inside application template '61' |
Application, primitive | ETSI |
53 |
Discretionary Data inside application template '61' |
Application, primitive | ETSI |
5F50 |
Uniform Resource Locator (URL) inside application template '61' |
Application, primitive | ETSI |
61 |
Application Template EF.DIR record entry; constructed |
Application, constructed | ETSI |
73 |
Discretionary Template inside application template '61' |
Application, constructed | ETSI |
7B |
Security Environment Template | Application, constructed | ETSI |
80 |
Terminal power supply inside terminal capabilities template 'A9' |
Context-specific, primitive | ETSI |
80 |
UICC Characteristics inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
81 |
Application Power Consumption inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
81 |
Extended logical channels terminal support inside terminal capabilities template 'A9' |
Context-specific, primitive | ETSI |
82 |
Additional interfaces support inside terminal capabilities template 'A9' |
Context-specific, primitive | ETSI |
82 |
Minimum Application Clock Freq. inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
82 |
Minimum application clock frequency inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
83 |
Amount of available memory inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
83 |
eUICC-related capabilities (SGP.22) inside terminal capabilities template 'A9' |
Context-specific, primitive | ETSI |
84 |
File details inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
84 |
eUICC-related capabilities (SGP.32) inside terminal capabilities template 'A9' |
Context-specific, primitive | ETSI |
85 |
Reserved file size inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
86 |
Maximum file size inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
87 |
Supported system commands inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
88 |
Specific UICC environmental conditions inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
89 |
Platform to Platform CAT Secured APDU inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
8A |
Test configuration state inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
8B |
Test configuration criterion type inside proprietary template 'A5' |
Context-specific, primitive | ETSI |
A0 |
EAP Application service specific data content tag inside discretionary template '73' in EF DIR |
Context-specific, constructed | ETSI |
A0 |
Launch pad constructed; record in EF LAUNCH PAD |
Context-specific, constructed | ETSI |
A1 |
M2M service specific data content tag inside discretionary template '73' in EF DIR |
Context-specific, constructed | ETSI |
A2 |
oneM2M service specific data content tag inside discretionary template '73' in EF DIR |
Context-specific, constructed | ETSI |
A9 |
Terminal capabilities template constructed |
Context-specific, constructed | ETSI |
C0 |
Special File Information inside proprietary template 'A5' |
Private, primitive | ETSI |
C1 |
Filling Pattern inside proprietary template 'A5' |
Private, primitive | ETSI |
C2 |
Repeat Pattern inside proprietary template 'A5' |
Private, primitive | ETSI |
D0 |
Proactive Command CAT BER-TLV template |
Private, primitive | ETSI |
D1 |
GSM/3GPP/3GPP2 – SMS-PP Download CAT BER-TLV template |
Private, primitive | ETSI |
D2 |
GSM/3GPP/3GPP2 – Cell Broadcast Download CAT BER-TLV template |
Private, primitive | ETSI |
D3 |
Menu Selection CAT BER-TLV template |
Private, primitive | ETSI |
D4 |
Call Control CAT BER-TLV template |
Private, primitive | ETSI |
D5 |
GSM/3GPP/3GPP2 – MO Short Message control CAT BER-TLV template |
Private, primitive | ETSI |
D6 |
Event Download CAT BER-TLV template |
Private, primitive | ETSI |
D7 |
Timer Expiration CAT BER-TLV template |
Private, primitive | ETSI |
D9 |
3GPP/3GPP2 – USSD Download CAT BER-TLV template |
Private, primitive | ETSI |
DA |
MMS Transfer status CAT BER-TLV template |
Private, primitive | ETSI |
DB |
MMS notification download CAT BER-TLV template |
Private, primitive | ETSI |
DC |
Terminal application tag CAT BER-TLV template |
Private, primitive | ETSI |
DD |
3GPP – Geographical Location Reporting tag CAT BER-TLV template |
Private, primitive | ETSI |
DE |
Envelope Container CAT BER-TLV template |
Private, primitive | ETSI |
E0 |
3GPP – 5G ProSe Report tag CAT BER-TLV template |
Private, constructed | ETSI |
PIV card data objects (NIST SP 800-73-5)
Data-object and template tags of the US Personal Identity Verification card application. 89 entries.
| Tag | Name | Class, form | Sources |
|---|---|---|---|
01 |
Name inside Printed Information |
Universal, primitive | NIST |
02 |
Employee Affiliation inside Printed Information |
Universal, primitive | NIST |
02 |
Number of Fingers inside BIT Group template '7F61' |
Universal, primitive | NIST |
04 |
Expiration date inside Printed Information |
Universal, primitive | NIST |
05 |
Agency Card Serial Number inside Printed Information |
Universal, primitive | NIST |
06 |
Algorithm OID inside '7F49' of CVC |
Universal, primitive | NIST |
06 |
Issuer Identification inside Printed Information |
Universal, primitive | NIST |
06 |
Object identifier inside template 'AC' |
Universal, primitive | NIST |
07 |
Organization Affiliation (Line 1) inside Printed Information; optional |
Universal, primitive | NIST |
08 |
Organization Affiliation (Line 2) inside Printed Information; optional |
Universal, primitive | NIST |
30 |
FASC-N inside CHUID |
Universal, constructed | NIST |
34 |
GUID inside CHUID |
Universal, constructed | NIST |
35 |
Expiration Date inside CHUID |
Universal, constructed | NIST |
36 |
Cardholder UUID inside CHUID; optional |
Universal, constructed | NIST |
3E |
Issuer Asymmetric Signature inside CHUID |
Universal, constructed | NIST |
42 |
Issuer Identification Number inside CVC; name wraps to 'Number' on next line |
Application, primitive | NIST |
4F |
Application identifier of application inside application property template '61' |
Application, primitive | NIST |
4F |
PIV Card Application AID inside Discovery Object '7E' |
Application, primitive | NIST |
50 |
Application label inside application property template '61' |
Application, primitive | NIST |
53 |
Data PUT DATA command data / GET DATA response wrapper |
Application, primitive | NIST |
5C |
Tag list GET DATA / PUT DATA command data |
Application, primitive | NIST |
5F20 |
Subject Identifier inside CVC |
Application, primitive | NIST |
5F29 |
Credential Profile Identifier inside CVC; name wraps in table |
Application, primitive | NIST |
5F2F |
PIN Usage Policy inside Discovery Object '7E' |
Application, primitive | NIST |
5F37 |
DigitalSignature object inside CVC |
Application, primitive | NIST |
5F4C |
Role Identifier inside CVC |
Application, primitive | NIST |
5F50 |
Uniform resource locator inside application property template '61' |
Application, primitive | NIST |
5FC101 |
X.509 Certificate for Card Authentication data object tag |
Application, primitive | NIST |
5FC102 |
Card Holder Unique Identifier data object tag (CHUID) |
Application, primitive | NIST |
5FC103 |
Cardholder Fingerprints data object tag |
Application, primitive | NIST |
5FC105 |
X.509 Certificate for PIV Authentication data object tag |
Application, primitive | NIST |
5FC106 |
Security Object data object tag |
Application, primitive | NIST |
5FC107 |
Card Capability Container data object tag |
Application, primitive | NIST |
5FC108 |
Cardholder Facial Image data object tag |
Application, primitive | NIST |
5FC109 |
Printed Information data object tag |
Application, primitive | NIST |
5FC10A |
X.509 Certificate for Digital Signature data object tag |
Application, primitive | NIST |
5FC10B |
X.509 Certificate for Key Management data object tag |
Application, primitive | NIST |
5FC10C |
Key History Object data object tag |
Application, primitive | NIST |
5FC121 |
Cardholder Iris Images data object tag |
Application, primitive | NIST |
5FC122 |
Secure Messaging Certificate Signer data object tag |
Application, primitive | NIST |
5FC123 |
Pairing Code Reference Data Container data object tag |
Application, primitive | NIST |
61 |
PIV Card Application property template returned on SELECT |
Application, constructed | NIST |
70 |
Certificate inside X.509 certificate containers |
Application, constructed | NIST |
71 |
CertInfo inside X.509 certificate containers |
Application, constructed | NIST |
79 |
Coexistent tag allocation authority inside application property template '61' |
Application, constructed | NIST |
7C |
Dynamic authentication template GENERAL AUTHENTICATE data |
Application, constructed | NIST |
7E |
Discovery Object interindustry template used as data object |
Application, constructed | NIST |
7F21 |
Card Verifiable Certificate constructed |
Application, constructed | NIST |
7F21 |
Intermediate CVC inside Secure Messaging Certificate Signer; conditional |
Application, constructed | NIST |
7F49 |
CardHolderPublicKey Data Object inside CVC; name wraps to 'Data Object' on next line |
Application, constructed | NIST |
7F60 |
BIT for first Finger inside BIT Group template '7F61' |
Application, constructed | NIST |
7F61 |
Biometric Information Templates Group Template data object tag; name wraps in table |
Application, constructed | NIST |
80 |
Cryptographic algorithm identifier inside template 'AC'; name wraps in table |
Context-specific, primitive | NIST |
80 |
Cryptographic mechanism identifier inside key-generation control template 'AC' |
Context-specific, primitive | NIST |
80 |
Witness inside dynamic authentication template '7C' |
Context-specific, primitive | NIST |
81 |
Challenge inside dynamic authentication template '7C' |
Context-specific, primitive | NIST |
81 |
Modulus inside public key template '7F49' (RSA) |
Context-specific, primitive | NIST |
81 |
Parameter inside key-generation control template 'AC' |
Context-specific, primitive | NIST |
82 |
Public exponent inside public key template '7F49' (RSA) |
Context-specific, primitive | NIST |
82 |
Response inside dynamic authentication template '7C' |
Context-specific, primitive | NIST |
85 |
Exponentiation inside dynamic authentication template '7C' |
Context-specific, primitive | NIST |
86 |
Point inside public key template '7F49' (ECC) |
Context-specific, primitive | NIST |
86 |
Public-key object inside '7F49' of CVC |
Context-specific, primitive | NIST |
8E |
Cryptographic checksum (MAC) secure messaging |
Context-specific, primitive | NIST |
97 |
Le secure messaging |
Context-specific, primitive | NIST |
99 |
Pairing Code inside Pairing Code Reference Data Container |
Context-specific, primitive | NIST |
99 |
Status word secure messaging |
Context-specific, primitive | NIST |
AC |
Cryptographic algorithms supported inside application property template '61' |
Context-specific, constructed | NIST |
BA |
Mapping of DG to ContainerID inside Security Object container |
Context-specific, constructed | NIST |
BB |
Security Object inside Security Object container |
Context-specific, constructed | NIST |
BC |
Facial Image inside Cardholder Facial Image container |
Context-specific, constructed | NIST |
BC |
Fingerprint I & II inside Cardholder Fingerprints container |
Context-specific, constructed | NIST |
BC |
Images for Iris inside Cardholder Iris Images container |
Context-specific, constructed | NIST |
C1 |
keysWithOnCardCerts inside Key History Object |
Private, primitive | NIST |
C2 |
keysWithOffCardCerts inside Key History Object |
Private, primitive | NIST |
F0 |
Card Identifier inside Card Capability Container |
Private, constructed | NIST |
F1 |
Capability Container version number inside Card Capability Container |
Private, constructed | NIST |
F2 |
Capability Grammar version number inside Card Capability Container |
Private, constructed | NIST |
F3 |
Applications CardURL inside Card Capability Container |
Private, constructed | NIST |
F3 |
offCardCertURL inside Key History Object; differs from F3 in CCC |
Private, constructed | NIST |
F4 |
PKCS#15 inside Card Capability Container |
Private, constructed | NIST |
F5 |
Registered Data Model number inside Card Capability Container |
Private, constructed | NIST |
F6 |
Access Control Rule Table inside Card Capability Container |
Private, constructed | NIST |
F7 |
Card APDUs inside Card Capability Container |
Private, constructed | NIST |
FA |
Redirection Tag inside Card Capability Container |
Private, constructed | NIST |
FB |
Capability Tuples (CTs) inside Card Capability Container |
Private, constructed | NIST |
FC |
Status Tuples (STs) inside Card Capability Container |
Private, constructed | NIST |
FD |
Next CCC inside Card Capability Container |
Private, constructed | NIST |
FE |
Error Detection Code present in most PIV containers |
Private, constructed | NIST |
Electronic passport data groups (ICAO Doc 9303 Part 10)
Tags of the logical data structure in ePassports and other machine-readable travel documents. 65 entries.
| Tag | Name | Class, form | Sources |
|---|---|---|---|
02 |
Number of instances of this type of biometric inside '7F61' |
Universal, primitive | ICAO |
5C |
Tag list inside EF.COM '60'; also used in DG11/DG12 |
Application, primitive | ICAO |
5F01 |
LDS Version number inside EF.COM '60' |
Application, primitive | ICAO |
5F0E |
Full name of document holder in national characters inside DG11 '6B' |
Application, primitive | ICAO |
5F0F |
Other name inside 'A0' of DG11 |
Application, primitive | ICAO |
5F10 |
Personal number inside DG11 '6B' |
Application, primitive | ICAO |
5F11 |
Place of birth inside DG11 '6B' |
Application, primitive | ICAO |
5F12 |
Telephone inside DG11 '6B' |
Application, primitive | ICAO |
5F13 |
Profession inside DG11 '6B' |
Application, primitive | ICAO |
5F14 |
Title inside DG11 '6B' |
Application, primitive | ICAO |
5F15 |
Personal summary inside DG11 '6B' |
Application, primitive | ICAO |
5F16 |
Proof of citizenship inside DG11 '6B' |
Application, primitive | ICAO |
5F17 |
Other valid TD numbers inside DG11 '6B' |
Application, primitive | ICAO |
5F18 |
Custody information inside DG11 '6B' |
Application, primitive | ICAO |
5F19 |
Issuing Authority inside DG12 '6C' |
Application, primitive | ICAO |
5F1A |
Name of other person inside 'A0' of DG12 |
Application, primitive | ICAO |
5F1B |
Endorsements, observations inside DG12 '6C' |
Application, primitive | ICAO |
5F1C |
Tax/Exit requirements inside DG12 '6C' |
Application, primitive | ICAO |
5F1D |
Image of front of document inside DG12 '6C' |
Application, primitive | ICAO |
5F1E |
Image of rear of document inside DG12 '6C' |
Application, primitive | ICAO |
5F1F |
MRZ data object inside DG1 '61' |
Application, primitive | ICAO |
5F26 |
Date of issue inside DG12 '6C' |
Application, primitive | ICAO |
5F2B |
Full date of birth inside DG11 '6B' |
Application, primitive | ICAO |
5F2E |
Biometric data inside '7F60'; alternative tag '7F2E' |
Application, primitive | ICAO |
5F36 |
Unicode Version number inside EF.COM '60' |
Application, primitive | ICAO |
5F40 |
Displayed portrait inside DG5 '65' |
Application, primitive | ICAO |
5F42 |
Permanent address inside DG11 '6B' |
Application, primitive | ICAO |
5F43 |
Displayed Signature inside DG7 '67' |
Application, primitive | ICAO |
5F50 |
Date data recorded inside DG16 '70' templates; differs from 5F50 URL elsewhere |
Application, primitive | ICAO |
5F51 |
Name of person inside DG16 '70' templates |
Application, primitive | ICAO |
5F52 |
Telephone inside DG16 '70' templates |
Application, primitive | ICAO |
5F53 |
Address inside DG16 '70' templates |
Application, primitive | ICAO |
5F55 |
Date and time of document personalization inside DG12 '6C' |
Application, primitive | ICAO |
5F56 |
Serial number of personalization system inside DG12 '6C' |
Application, primitive | ICAO |
60 |
EF.COM Header and Data Group Presence Information |
Application, constructed | ICAO |
61 |
EF.DG1 Data Group 1 |
Application, constructed | ICAO |
63 |
EF.DG3 Data Group 3 |
Application, constructed | ICAO |
65 |
EF.DG5 Data Group 5 |
Application, constructed | ICAO |
66 |
EF.DG6 Data Group 6 |
Application, constructed | ICAO |
67 |
EF.DG7 Data Group 7 |
Application, constructed | ICAO |
68 |
EF.DG8 Data Group 8 |
Application, constructed | ICAO |
69 |
EF.DG9 Data Group 9 |
Application, constructed | ICAO |
6A |
EF.DG10 Data Group 10 |
Application, constructed | ICAO |
6B |
EF.DG11 Data Group 11 |
Application, constructed | ICAO |
6C |
EF.DG12 Data Group 12 |
Application, constructed | ICAO |
6D |
EF.DG13 Data Group 13 |
Application, constructed | ICAO |
6E |
EF.DG14 Data Group 14 |
Application, constructed | ICAO |
6F |
EF.DG15 Data Group 15 |
Application, constructed | ICAO |
70 |
EF.DG16 Data Group 16 |
Application, constructed | ICAO |
75 |
EF.DG2 Data Group 2 |
Application, constructed | ICAO |
76 |
EF.DG4 Data Group 4 |
Application, constructed | ICAO |
77 |
Document Security Object EF.SOD |
Application, constructed | ICAO |
7F2E |
Biometric data inside '7F60'; alternative to '5F2E' |
Application, constructed | ICAO |
7F60 |
Biometric Information Template inside '7F61' |
Application, constructed | ICAO |
7F61 |
Biometric Information Template Group Template constructed; inside DG2/DG3/DG4 |
Application, constructed | ICAO |
80 |
ICAO header version inside BHT 'A1' |
Context-specific, primitive | ICAO |
81 |
Biometric type inside BHT 'A1' |
Context-specific, primitive | ICAO |
82 |
Biometric sub-type inside BHT 'A1' |
Context-specific, primitive | ICAO |
83 |
Creation date and time inside BHT 'A1' |
Context-specific, primitive | ICAO |
85 |
Validity period (from through) inside BHT 'A1' |
Context-specific, primitive | ICAO |
86 |
Creator of the biometric reference data (PID) inside BHT 'A1' |
Context-specific, primitive | ICAO |
87 |
Format owner inside BHT 'A1' |
Context-specific, primitive | ICAO |
88 |
Format type inside BHT 'A1' |
Context-specific, primitive | ICAO |
A0 |
Content-specific class inside DG11 '6B' / DG12 '6C' |
Context-specific, constructed | ICAO |
A1 |
Biometric Header Template (BHT) inside '7F60' |
Context-specific, constructed | ICAO |
OpenPGP card data objects
Data objects of the OpenPGP smart-card application, as published by the specification author. 55 entries.
| Tag | Name | Class, form | Sources |
|---|---|---|---|
4D |
Extended Header list constructed; key import |
Application, primitive | OpenPGP card spec |
4F |
Full Application identifier (AID) simple DO |
Application, primitive | OpenPGP card spec |
5B |
Name inside '65' |
Application, primitive | OpenPGP card spec |
5E |
Login data simple DO |
Application, primitive | OpenPGP card spec |
5F2D |
Language preferences inside '65' |
Application, primitive | OpenPGP card spec |
5F35 |
Sex inside '65' |
Application, primitive | OpenPGP card spec |
5F48 |
Cardholder private key inside Extended Header list '4D' |
Application, primitive | OpenPGP card spec |
5F50 |
Uniform resource locator (URL) simple DO |
Application, primitive | OpenPGP card spec |
5F52 |
Historical bytes simple DO |
Application, primitive | OpenPGP card spec |
65 |
Cardholder Related Data constructed DO |
Application, constructed | OpenPGP card spec |
6E |
Application Related Data constructed DO |
Application, constructed | OpenPGP card spec |
73 |
Discretionary data objects constructed; inside '6E' |
Application, constructed | OpenPGP card spec |
7A |
Security support template constructed DO |
Application, constructed | OpenPGP card spec |
7F21 |
Cardholder certificate constructed DO |
Application, constructed | OpenPGP card spec |
7F48 |
Cardholder private key template inside Extended Header list '4D' |
Application, constructed | OpenPGP card spec |
7F49 |
Public Key DO constructed |
Application, constructed | OpenPGP card spec |
7F66 |
Extended length information constructed DO |
Application, constructed | OpenPGP card spec |
7F74 |
General feature management constructed DO; optional |
Application, constructed | OpenPGP card spec |
81 |
KDF algorithm byte inside KDF-DO 'F9' |
Context-specific, primitive | OpenPGP card spec |
81 |
Modulus inside '7F49' (RSA) |
Context-specific, primitive | OpenPGP card spec |
82 |
Hash algorithm byte inside KDF-DO 'F9' |
Context-specific, primitive | OpenPGP card spec |
82 |
Public exponent inside '7F49' (RSA) |
Context-specific, primitive | OpenPGP card spec |
83 |
Iteration count inside KDF-DO 'F9' |
Context-specific, primitive | OpenPGP card spec |
84 |
Salt bytes for User password (PW1) inside KDF-DO 'F9' |
Context-specific, primitive | OpenPGP card spec |
85 |
Salt bytes for Resetting Code of PW1 inside KDF-DO 'F9' |
Context-specific, primitive | OpenPGP card spec |
86 |
Public key inside '7F49' (ECDSA/ECDH) |
Context-specific, primitive | OpenPGP card spec |
86 |
Salt bytes for Admin password (PW3) inside KDF-DO 'F9' |
Context-specific, primitive | OpenPGP card spec |
87 |
Initial password hash for User-PW inside KDF-DO 'F9' |
Context-specific, primitive | OpenPGP card spec |
88 |
Initial password hash for Admin-PW inside KDF-DO 'F9' |
Context-specific, primitive | OpenPGP card spec |
93 |
Digital signature counter inside '7A' |
Context-specific, primitive | OpenPGP card spec |
A6 |
Cipher DO ECDH decipher input |
Context-specific, constructed | OpenPGP card spec |
C0 |
Extended Capabilities inside '73' |
Private, primitive | OpenPGP card spec |
C1 |
Algorithm attributes signature inside '73' |
Private, primitive | OpenPGP card spec |
C2 |
Algorithm attributes decryption inside '73' |
Private, primitive | OpenPGP card spec |
C3 |
Algorithm attributes authentication inside '73' |
Private, primitive | OpenPGP card spec |
C4 |
PW status Bytes inside '73' |
Private, primitive | OpenPGP card spec |
C5 |
Fingerprints inside '73' |
Private, primitive | OpenPGP card spec |
C6 |
List of CA-Fingerprints inside '73' |
Private, primitive | OpenPGP card spec |
C7 |
Fingerprint (binary) for signature key PUT DATA only |
Private, primitive | OpenPGP card spec |
C8 |
Fingerprint (binary) for decryption key PUT DATA only |
Private, primitive | OpenPGP card spec |
C9 |
Fingerprint (binary) for authentication key PUT DATA only |
Private, primitive | OpenPGP card spec |
CA |
1st CA-Fingerprint in list PUT DATA only |
Private, primitive | OpenPGP card spec |
CB |
2nd CA-Fingerprint in list PUT DATA only |
Private, primitive | OpenPGP card spec |
CC |
3rd CA-Fingerprint in list PUT DATA only |
Private, primitive | OpenPGP card spec |
CD |
List of generation dates/times of key pairs inside '73' |
Private, primitive | OpenPGP card spec |
CE |
Generation date/time of signature key PUT DATA only |
Private, primitive | OpenPGP card spec |
CF |
Generation date/time of decryption key PUT DATA only |
Private, primitive | OpenPGP card spec |
D0 |
Generation date/time of authentication key PUT DATA only |
Private, primitive | OpenPGP card spec |
D3 |
Resetting Code PUT DATA only |
Private, primitive | OpenPGP card spec |
D6 |
User Interaction Flag (UIF) for PSO:CDS optional |
Private, primitive | OpenPGP card spec |
D7 |
UIF for PSO:DEC optional |
Private, primitive | OpenPGP card spec |
D8 |
UIF for PSO:AUT optional |
Private, primitive | OpenPGP card spec |
DE |
Key Information simple DO |
Private, primitive | OpenPGP card spec |
F9 |
KDF-DO constructed DO; optional |
Private, constructed | OpenPGP card spec |
FA |
Algorithm Information constructed DO |
Private, constructed | OpenPGP card spec |
eID and card-verifiable certificate data (BSI TR-03110)
Tags used in German eID documents, card-verifiable certificates and secure messaging. 31 entries.
| Tag | Name | Class, form | Sources |
|---|---|---|---|
06 |
Object Identifier | Universal, primitive | BSI |
42 |
Certification Authority Reference name wraps to 'Reference' on next table line |
Application, primitive | BSI |
53 |
Discretionary Data | Application, primitive | BSI |
5F20 |
Certificate Holder Reference | Application, primitive | BSI |
5F24 |
Certificate Expiration Date | Application, primitive | BSI |
5F25 |
Certificate Effective Date | Application, primitive | BSI |
5F29 |
Certificate Profile Identifier | Application, primitive | BSI |
5F37 |
Signature | Application, primitive | BSI |
65 |
Certificate Extensions constructed |
Application, constructed | BSI |
67 |
Authentication constructed |
Application, constructed | BSI |
73 |
Discretionary Data Template constructed |
Application, constructed | BSI |
7F21 |
CV Certificate constructed |
Application, constructed | BSI |
7F49 |
Public Key constructed |
Application, constructed | BSI |
7F4C |
Certificate Holder Authorization Template constructed; name wraps to 'Authorization Template' on next table line |
Application, constructed | BSI |
7F4E |
Certificate Body constructed |
Application, constructed | BSI |
81 |
Composite modulus inside Public Key '7F49' (RSA) |
Context-specific, primitive | BSI |
81 |
Prime modulus inside Public Key '7F49' (DH and EC) |
Context-specific, primitive | BSI |
82 |
First coefficient inside Public Key '7F49' (EC) |
Context-specific, primitive | BSI |
82 |
Order of the subgroup inside Public Key '7F49' (DH) |
Context-specific, primitive | BSI |
82 |
Public exponent inside Public Key '7F49' (RSA) |
Context-specific, primitive | BSI |
83 |
Generator inside Public Key '7F49' (DH) |
Context-specific, primitive | BSI |
83 |
Second coefficient inside Public Key '7F49' (EC) |
Context-specific, primitive | BSI |
84 |
Base point inside Public Key '7F49' (EC) |
Context-specific, primitive | BSI |
84 |
Public value inside Public Key '7F49' (DH) |
Context-specific, primitive | BSI |
85 |
Order of the base point inside Public Key '7F49' (EC) |
Context-specific, primitive | BSI |
86 |
Public point inside Public Key '7F49' (EC) |
Context-specific, primitive | BSI |
87 |
Cofactor inside Public Key '7F49' (EC) |
Context-specific, primitive | BSI |
87 |
Padding-content indicator followed by cryptogram secure messaging |
Context-specific, primitive | BSI |
8E |
Cryptographic Checksum secure messaging |
Context-specific, primitive | BSI |
97 |
Protected Le secure messaging |
Context-specific, primitive | BSI |
99 |
Processing Status secure messaging |
Context-specific, primitive | BSI |
How this reference was built
Every entry comes from a document that anyone can read without signing in or accepting licence terms: payment processor and gateway developer documentation, card-network acceptance guides, U.S. Payments Forum papers, ETSI specifications, NIST SP 800-73-5, ICAO Doc 9303, the OpenPGP card specification and BSI TR-03110. Each tag-and-name pair was checked automatically against our cached copy of its source. Tags confirmed only by documents that restrict reuse, vendor-proprietary tags and values that are not valid BER tags were left out, as were a few groups of low practical interest (UICC remote-management scripting tags and PIV’s twenty retired key-management certificate objects). The names are those used by the sources; the section descriptions, notes and ordering are ours. Last verified 6 October 2026.
Frequently asked questions
Is this an official EMV tag list?
No. It is an independent reference built from public documentation. Official tag definitions for payment cards are in the specifications of the bodies that publish them.
Why is a tag I need missing?
Either no freely readable document we found confirms it, or it is proprietary to one product. Check the specification of the application or device that produces it.
How do I tell a two-byte tag from a one-byte tag?
Look at the low five bits of the first byte. If they are all 1 (as in 9F, 5F, BF or DF), the tag continues in the next byte; otherwise the tag is one byte long.
What does “constructed” mean in the table?
The value of a constructed tag is itself a sequence of TLV objects, so a parser should look inside it. A primitive tag’s value is plain data.
Related reading on Ambimat
- How to parse BER-TLV data in JavaScript
- Application identifier (AID) list
- Application discovery and selection on chip cards
- Smart card APDU commands
- Static Data Authentication explained
Sources
- ITU-T Recommendation X.690 (02/2021), §8.1.2 identifier octets (class, primitive/constructed, multi-byte tag numbers): itu.int
- Visa: usa.visa.com/visa-smart-debit-credit-contact-contactless-us-acquirer-impl
- Cybersource: developer.cybersource.com/pos-info-emv-tags.html
- Authorize.Net: www.authorize.net/EMV_API_Guide.pdf
- Shift4: docs.shift4.com/emv-tags-for-utgless-devices
- Elavon: developer.elavon.com/emv-api-fields
- Elavon: developer.elavon.com/emv-tags-and-other-emv-related-response-fields
- Slim CD: developer.slimcd.com/
- AnywhereCommerce: help.anywherecommerce.com/2558296066
- Global Payments (Heartland): cert.api2.heartlandportico.com/EMV%20Request%20Tags.html
- Elavon: developer.elavon.com/sample-emv-files
- Visa: usa.visa.com/transaction-acceptance-device-guide-tadg.pdf
- Bluefin: developers.bluefin.com/emv-data-1
- Cybersource: developer.cybersource.com/cp-retail-eftpos-emv-tags.html
- USPF: www.uspaymentsforum.org/Payment-Network-Host-and-Level-3-Requirements-Final-09292023
- Global Payments (Heartland): cert.api2.heartlandportico.com/EMV%20Response%20Tags.html
- Visa: usa.visa.com/quick-chip-emv-specification.pdf
- MineSec: docs.minesecsoftpos.com/emv-settings
- USPF: www.uspaymentsforum.org/Emerging-Data-Elements-in-Mobile-Wallets-WP-FINAL-Nov-2019-.
- ETSI: www.etsi.org/ts_102221v180400p.pdf
- ETSI: www.etsi.org/ts_101220v190000p.pdf
- NIST: nvlpubs.nist.gov/NIST.SP.800-73pt1-5.pdf
- NIST: nvlpubs.nist.gov/NIST.SP.800-73pt2-5.pdf
- ICAO: www.icao.int/9303_p10_cons_en.pdf
- OpenPGP card spec: gnupg.org/OpenPGP-smart-card-application-3.4.1.pdf
- BSI: www.bsi.bund.de/BSI_TR-03110_Part-3-V2_2.pdf?__blob=publicationFile&v=2