AC is requested by terminal's CDOL and AC-type signed by ICC's private key and it will be verified by ICC's public key.

There's two 'GENERATE AC' steps in CDA.