johnl@iecc.com
Date: 27 Feb 2018 21:19:53 -0500
That is really pitiful. Passport data use a standard PKI and they are
signed with the same kind of certificates that web sites use. You can get
passport reading apps for phones that will show you what's on your
passport's chip. US passports are signed with a CA from the US State
Department.
They don't even have to collect the certs, since the ICAO keeps the database for the benefit of airlines that want to verify passengers' passports.