← Back to Knowledge Base

EMV Tag Reference: Complete Data Object List

Updated July 27, 2026 · CardWise Knowledge Base · Tags sourced from EMV Book 3 & 4

Complete reference of EMV data objects (tags) used in contact and contactless payment card transactions. All tags use BER-TLV encoding as defined in EMV Book 3, Annex B. Search by tag hex value or keyword to find descriptions, formats, and source books.

Popular tags: 5A PAN 5F20 Cardholder Name 5F24 Expiry 82 AIP 94 AFL 9F33 Terminal Caps 9F36 ATC 9F26 AC 9F10 IAD 9F02 Amount 57 Track 2 8C CDOL1
TagNameCat.FormatSourceDescription
42Issuer Public Key ExponentCertbB3RSA public key exponent used by the issuer (usually 3 or 65537).
4FApplication Dedicated File (ADF) NameCardbB3AID — uniquely identifies the payment application. Used in SELECT command.
50Application LabelCardanB3Human-readable application name (e.g. "Visa Credit"). Displayed on terminal during app selection.
56Track 1 DataCardanB4Magnetic stripe Track 1 equivalent data (cardholder name, PAN, expiry).
57Track 2 Equivalent DataCardbB3Track 2 equivalent data — PAN + separator (D) + expiry + service code + PVV. Core card identification data.
5AApplication PANCardcnB3Primary Account Number — the card number. Compressed numeric (BCD). Up to 10 bytes for 19-digit PAN.
5F20Cardholder NameCardanB3Cardholder name in ASCII. Format: "SURNAME/FIRST NAME ". 2-26 bytes.
5F24Application Expiration DateCardnB3Expiry date in YYMMDD format. 3 bytes. After this date, the card should be declined.
5F25Application Effective DateCardnB3Date from which the application is valid. YYMMDD. Before this, decline.
5F28Issuer Country CodeCardnB3ISO 3166 numeric country code. 2 bytes. 0840=USA, 0826=UK, 0156=China.
5F2ATransaction Currency CodeTxnnB3ISO 4217 currency code. 2 bytes. 0840=USD, 0978=EUR, 0826=GBP, 0156=CNY.
5F30Service CodeCardnB31-3 bytes defining allowed transactions. Digit 1: 1=international, 2=international+IC. Digit 2: 0=normal, 2=issuer auth. Digit 3: PIN requirements.
5F34Application PAN Sequence NumberCardnB3Distinguishes cards with the same PAN (e.g., primary vs secondary card). 1 byte.
5F35CVM ListCardvarB4Cardholder Verification Method List — defines PIN/signature/CDCVM methods and their conditions.
5F36Transaction Currency ExponentTxnnB3Exponent applied to Amount fields. Usually 2 (divide by 100 for decimal).
6FFCI TemplateCardvarB3File Control Information — Constructed template returned by SELECT. Contains AID, app label, PDOL, etc.
70Record TemplateCardvarB3Constructed template returned by READ RECORD. Contains card data (57, 5A, 5F20, 5F24, etc.).
71Issuer Script TemplateCardvarB3Template for post-authorization issuer scripts to the card.
77Response Message Template Format 2CardvarB3GPO response template. Contains AIP (82) + AFL (94). The most common GPO response format.
80Response Message Template Format 1CardvarB3Alternative GPO response format. Contains AIP + AFL + optional data.
82AIP — Application Interchange ProfileCardbB3Bitmask indicating supported EMV features: SDA, DDA, CDA, CVM, Terminal Risk Mgmt, Issuer Auth.
84Dedicated File (DF) NameCardbB3DF name, identical to the AID. Used in payment system directory.
87Application Priority IndicatorCardbB3Indicates priority order when multiple payment apps exist on one card.
88SFI — Short File IdentifierCardbB35-bit file identifier used in READ RECORD command. Range 1-30.
8AAuthorisation Response CodeTxnanB4Issuer's authorization decision: 00=approved, 05=declined, 01=refer to issuer.
8CCDOL1CardvarB3Card Risk Management Data Object List 1 — data needed by card for first GENERATE AC.
8DCDOL2CardvarB3Card Risk Management Data Object List 2 — data for second GENERATE AC (online auth).
8ECVM ListCardvarB3Cardholder Verification Method list (alternative location).
8FCertification Authority Public Key IndexCertbB3Identifies which CA (Visa/MC/etc.) public key to use for certificate verification.
90Issuer Public Key CertificateCertbB3RSA certificate signed by the CA containing the issuer's public key for SDA/DDA/CDA.
91Issuer Authentication DataCertbB3Data generated by issuer during online authorization.
92Issuer Public Key RemainderCertbB3Lower portion of the issuer's RSA public key modulus (when the full modulus exceeds the certificate size).
93Signed Static Application Data (SSAD)CertbB3Issuer-signed critical static data for SDA authentication.
94AFL — Application File LocatorCardvarB3List of (SFI, first record, last record, offline auth records). Tells the terminal which records to read. 4 bytes per entry.
95TVR — Terminal Verification ResultsTermbB45-byte bitmask set by the terminal during risk management. Indicates failed checks.
97TDOLCardvarB3Transaction Certificate Data Object List for TC Hash computation.
99Transaction PIN DataTxnbB4Encrypted PIN block for online PIN verification.
9ATransaction DateTxnnB3Local transaction date. YYMMDD. 3 bytes.
9BTSI — Transaction Status InformationTermbB4Bitmask recording which steps were performed (SDA done, DDA done, CVM performed, etc.).
9CTransaction TypeTxnnB300=purchase, 01=cash withdrawal, 20=refund, 28=balance inquiry.
9F02Amount, AuthorisedTxnnB4Authorized transaction amount, 6 bytes compressed BCD. E.g. 000000001000 = 10.00.
9F03Amount, OtherTxnnB4Secondary amount (e.g., cashback, tip). 6 bytes compressed BCD.
9F10IAD — Issuer Application DataCardbB3Proprietary issuer data returned by GENERATE AC. Contains CVR, counters, and issuer-specific fields.
9F1ATerminal Country CodeTermnB4ISO 3166 country code of the terminal. 2 bytes.
9F21Transaction TimeTxnnB4Local transaction time (HHMMSS). 3 bytes.
9F26Application Cryptogram (AC)CardbB38-byte cryptogram generated by the card (TC/ARQC/AAC). The core output of GENERATE AC.
9F27CID — Cryptogram Information DataCardbB31 byte indicating cryptogram type: 0x40=TC, 0x80=ARQC, 0x00=AAC.
9F33Terminal CapabilitiesTermbB43-byte bitmask of terminal-supported features (CVM methods, auth methods, card data input).
9F34CVM ResultsTermbB4Records which CVM was performed and the result. 3 bytes.
9F35Terminal TypeTermnB40x22=POS attended, 0x14=electronic cash, 0x11=ATM. 1 byte.
9F36ATC — Application Transaction CounterCardbB32-byte counter incremented after each transaction. Anti-replay mechanism used in AC generation.
9F37Unpredictable NumberTermbB44-byte random number from the terminal. Ensures cryptogram freshness. Anti-replay.
9F38PDOLCardvarB3Processing Options DOL — data the card needs from the terminal for GPO.
9F39POS Entry ModeTermbB42 bytes: how the card was read (contact/contactless, PAN entry method, PIN entry capability).
9F46ICC Public Key CertificateCertbB3Card's public key certificate for DDA/CDA dynamic authentication.
9F47ICC Public Key ExponentCertbB3ICC public key exponent for DDA. 1-3 bytes.
9F49DDOLCardvarB3Dynamic DOL — data to be signed by the ICC for DDA/CDA.
9F4BSDAD — Signed Dynamic Application DataCertbB3Card-signed dynamic data for DDA/CDA. The core output of dynamic card authentication.
9F66TTQ — Terminal Transaction QualifiersTermbB44-byte bitmask of terminal transaction capabilities and preferences for CDCVM, contactless, etc.
A5FCI Proprietary TemplateCardvarB3Proprietary data within the FCI template returned by SELECT.
BF0CFCI Issuer Discretionary DataCardvarB3Issuer-defined data within the FCI. May contain additional app information.

BER-TLV Encoding in EMV

All EMV tags use BER-TLV format. Tag is 1-2 bytes (Application class 01xxxxxx or Context-specific 10xxxxxx). Length is short form (1 byte, value 0-127) or long form (first byte 0x81-0x84, followed by that many length bytes). Constructed tags (b6=1 in first tag byte) contain nested TLV structures — essential for templates like 77 (GPO response) and 6F (FCI).

Learn more: For the underlying protocol, read ISO 7816 Complete Guide. For APDU commands used with these tags, see APDU Commands Reference.