A method for provisioning of an application level identity from an ID backend server to a communication device, wherein the communication device comprises a universal integrated-circuit card, UICC, configured for interaction according to GSMA RSP based remote subscription profile download, the method being performed by the communication device, the method comprising: transmitting a first message to the ID backend server to establish a secure communication with the ID backend server, wherein the first message is a ClientHello message of a TLS handshake protocol and comprises an identity module challenge; receiving a second message from the ID backend server as part of establishing the secure communication with the ID backend server, wherein the second message is provided as a combination of a ServerHello message, a first CertificateRequest message indicating a request for an identity module certificate, a first Certificate message comprising an ID backend certificate, a first Certificate Verify message comprising an ID backend signature for authentication of the ID backend server at the communication device, and a first Finished message of the TLS handshake protocol, wherein the ID backend signature is based on the identity module challenge and hash of all exchanged TLS Handshake Protocol messages up to and including the first Certificate message sent from the ID backend server to the communication device; transmitting a third message to the ID backend server as part of establishing the secure communication with the ID backend server, wherein the third message is provided as a combination of a second Certificate message comprising the identity module certificate, a second Certificate Verify message comprising an identity module signature for authentication of the communication device at the ID backend server, and a second Finished message of the TLS handshake protocol; and receiving a fourth message from the ID backend server, wherein the fourth message comprises the application level identity information and is protected using the established secure communication with the ID backend server. transmitting a first message to the ID backend server to establish a secure communication with the ID backend server, wherein the first message is a ClientHello message of a TLS handshake protocol and comprises an identity module challenge; receiving a second message from the ID backend server as part of establishing the secure communication with the ID backend server, wherein the second message is provided as a combination of a ServerHello message, a first CertificateRequest message indicating a request for an identity module certificate, a first Certificate message comprising an ID backend certificate, a first Certificate Verify message comprising an ID backend signature for authentication of the ID backend server at the communication device, and a first Finished message of the TLS handshake protocol, wherein the ID backend signature is based on the identity module challenge and hash of all exchanged TLS Handshake Protocol messages up to and including the first Certificate message sent from the ID backend server to the communication device; transmitting a third message to the ID backend server as part of establishing the secure communication with the ID backend server, wherein the third message is provided as a combination of a second Certificate message comprising the identity module certificate, a second Certificate Verify message comprising an identity module signature for authentication of the communication device at the ID backend server, and a second Finished message of the TLS handshake protocol; and receiving a fourth message from the ID backend server, wherein the fourth message comprises the application level identity information and is protected using the established secure communication with the ID backend server.