L.5 Storage of certificates

31.1023GPPCharacteristics of the Universal Subscriber Identity Module (USIM) applicationRelease 17TS

If the UICC supports the certificate based procedure, the UICC shall be provisioned with the UICC certificate and the root certificate. The UICC certificate, which is used as a server certificate in the TLS handshake, is stored in EFCERT in USIM-INI as it needs to be accessed by the RN for reading the CRL distribution point before establishing the secure channel, for details cf. TS 33.401 [52]. The root certificate, which is used to verify the RN certificate in the TLS handshake, is only needed for UICC-internal purposes and need not be stored in an EF.